Skip to content
OpenAdvisories

Product · M-Files

M-Files Server

35 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.4
    CVE-2022-1606

    Incorrect privilege assignment in M-Files Server

    Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects.

    M-Files M-Files Server
  • Low 2.0
    CVE-2021-41808

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

    M-Files M-Files Server
  • Low 3.5
    CVE-2021-41809

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

    M-Files M-Files Server