Latest vulnerabilities for "m-files m-files server"

7.5

First published (updated )

CVE-2022-4858

M-files M-files ServerIncorrect privilege assignment in M-Files Web Server

low

2.6

First published (updated )

CVE-2022-4270

M-files M-files ServerIn M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

low

2.3

First published (updated )

CVE-2021-41808

M-files M-files ServerLack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.

critical

9.8

First published (updated )

CVE-2021-41807

M-files M-files ServerPath traversal in M-Files API

8.4

EPSS

0.04%

First published (updated )

CVE-2024-6789

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

M-files M-files ServerXSS vulnerability in M-Files Web

7.6

First published (updated )

CVE-2022-4862

M-files M-files ServerInsecure way of passing a download key

7.5

First published (updated )

CVE-2022-3284

M-files M-files ServerUncontrolled Resource Consumption in M-Files Server

6.5

First published (updated )

CVE-2023-0382

M-files M-files ServerUncontrolled Resource Consuption in M-Files Server

7.5

First published (updated )

CVE-2023-0383

M-files M-files ServerUncontrolled Resource Consuption in M-Files Server

7.5

First published (updated )

CVE-2023-0384

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

M-files M-files ServerDesktop component allows lateral movement between sessions

7.8

First published (updated )

CVE-2023-2112

M-files M-files ServerDenial of service condition in M-Files Server

7.5

First published (updated )

CVE-2023-3405

M-files M-files ServerInformation disclosure in M-Files Server

5.3

First published (updated )

CVE-2022-1911

M-files M-files ServerIncorrect privilege assignment in M-Files Server

4.3

First published (updated )

CVE-2022-1606

M-files M-files ServerImproper Permission Handling in M-Files Server

5.3

EPSS

0.05%

First published (updated )

CVE-2023-6189

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

M-files M-files ServerIncorrect calculation of effective permissions

8.8

EPSS

0.05%

First published (updated )

CVE-2023-6239

M-files M-files ServerUncontrolled Resource Consumption in M-Files Server

6.5

EPSS

0.04%

First published (updated )

CVE-2023-6910

M-files M-files ServerM-Files REST API allows Denial of Service

7.5

EPSS

0.05%

First published (updated )

CVE-2023-6117

M-files M-files ServerBrute force vulnerability in M-Files user authentication

critical

9.8

EPSS

0.09%

First published (updated )

CVE-2023-6912

M-files M-files ServerSSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

4.3

First published (updated )

CVE-2021-41809

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.