Skip to content
OpenAdvisories

Product · M-Files

M-Files Web

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.3
    CVE-2023-4479

    Stored XSS Vulnerability in M-Files Web

    Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.

    M-Files M-Files Web
  • High 7.3
    CVE-2023-2325

    Stored XSS Vulnerability in M-Files Classic Web

    Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.

    M-Files M-Files Web
  • High 7.7
    CVE-2023-3406

    Path traversal issue in M-Files Classic Web

    Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server

    M-Files M-Files Web
  • High 7.5
    CVE-2021-41807

    Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.

    Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.

    M-Files M-Files Server M-Files Web