M-Files kayıtları
m-files üreticisine ait 58 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %13,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9
- CWE-770 Allocation of Resources Without Limits or Throttling6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-269 Improper Privilege Management3
- CWE-280 Improper Handling of Insufficient Permissions or Privileges2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
58 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-41807İstismar yok | Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.m-files · m-files server · CWE-307 | Kritik9,8 | — | %1,1 | 18 Oca 2022 |
39İzleyin | CVE-2023-6912İstismar yok | Brute force vulnerability in M-Files user authenticationm-files · m-files server · CWE-307 | Kritik9,8 | — | %1,0 | 20 Ara 2023 |
37İzleyin | CVE-2025-5964Kavram kanıtı | Path traversal in M-Files APIm-files · m-files server · CWE-22 | Yüksek8,4 | — | %12,7 | 15 Haz 2025 |
36İzleyin | CVE-2024-10127İstismar yok | Support for authentication bypass condition in M-Files LDAP authenticationm-files · m-files server · CWE-303 | Kritik9,2 | — | %0,6 | 20 Kas 2024 |
35İzleyin | CVE-2023-6239İstismar yok | Incorrect calculation of effective permissionsm-files · m-files server · CWE-281 | Yüksek8,8 | — | %0,6 | 28 Kas 2023 |
35İzleyin | CVE-2022-39016İstismar yok | Javascript injection in PDFtron in M-Files Hubsharem-files · hubshare · CWE-20 | Yüksek8,8 | — | %0,5 | 31 Eki 2022 |
34İzleyin | CVE-2024-6881İstismar yok | Stored XSS Vulnerabilitym-files · hubshare · CWE-79 | Yüksek8,5 | — | %0,3 | 29 Tem 2024 |
34İzleyin | CVE-2024-6124İstismar yok | Reflected XSS in Hubshare via Open Redirectm-files · hubshare · CWE-79 | Yüksek8,5 | — | %0,3 | 29 Tem 2024 |
33İzleyin | CVE-2024-6789İstismar yok | Path traversal in M-Files APIm-files · m-files server · CWE-22 | Yüksek8,4 | — | %0,6 | 27 Ağu 2024 |
31İzleyin | CVE-2021-37253İstismar yok | M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headm-files · m-files web · CWE-444 | Yüksek7,5 | — | %2,9 | 5 Ara 2021 |
31İzleyin | CVE-2023-5523İstismar yok | M-Files Web Companion allows Remote Code Executionm-files · web companion · CWE-829 | Yüksek7,8 | — | %0,3 | 20 Eki 2023 |
31İzleyin | CVE-2023-0213İstismar yok | Local Elevation of Privilege in M-Filesm-files · m-files · CWE-427 | Yüksek7,8 | — | %0,2 | 29 Mar 2023 |
31İzleyin | CVE-2023-2480İstismar yok | Elevation of Privilege in M-Files Desktop Clientm-files · m-files · CWE-280 | Yüksek7,8 | — | %0,2 | 25 May 2023 |
31İzleyin | CVE-2023-2112İstismar yok | Desktop component allows lateral movement between sessionsm-files · m-files server · CWE-284 | Yüksek7,8 | — | %0,2 | 20 Nis 2023 |
30İzleyin | CVE-2021-37254İstismar yok | In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated accem-files · m-files web | Yüksek7,5 | — | %1,3 | 28 Eki 2021 |
30İzleyin | CVE-2023-3405İstismar yok | Denial of service condition in M-Files Serverm-files · m-files server · CWE-248 | Yüksek7,5 | — | %0,8 | 27 Haz 2023 |
30İzleyin | CVE-2023-0383İstismar yok | Uncontrolled Resource Consuption in M-Files Serverm-files · m-files server · CWE-770 | Yüksek7,5 | — | %0,8 | 20 Nis 2023 |
30İzleyin | CVE-2023-0384İstismar yok | Uncontrolled Resource Consuption in M-Files Serverm-files · m-files server · CWE-400 | Yüksek7,5 | — | %0,8 | 20 Nis 2023 |
30İzleyin | CVE-2024-4056İstismar yok | Denial of service condition in M-Files Serverm-files · m-files server · CWE-1333 | Yüksek7,5 | — | %0,8 | 26 Nis 2024 |
30İzleyin | CVE-2023-6117İstismar yok | M-Files REST API allows Denial of Servicem-files · m-files server · CWE-770 | Yüksek7,5 | — | %0,7 | 22 Kas 2023 |
30İzleyin | CVE-2022-3284İstismar yok | Insecure way of passing a download keym-files · m-files server · CWE-200 | Yüksek7,5 | — | %0,7 | 6 Mar 2023 |
30İzleyin | CVE-2022-4858İstismar yok | Insertion of Sensitive Information into Log Filem-files · m-files server · CWE-532 | Yüksek7,5 | — | %0,5 | 30 Ara 2022 |
30İzleyin | CVE-2022-39018İstismar yok | Broken access controls on PDFtron data in M-Files Hubsharem-files · hubshare · CWE-200 | Yüksek7,5 | — | %0,4 | 31 Eki 2022 |
30İzleyin | CVE-2022-39019İstismar yok | Broken access controls on PDFtron WebviewerUI in M-Files Hubsharem-files · hubshare · CWE-287 | Yüksek7,5 | — | %0,4 | 31 Eki 2022 |
30İzleyin | CVE-2022-4862İstismar yok | XSS vulnerability in M-Files Webm-files · m-files server · CWE-200 | Yüksek7,6 | — | %0,4 | 6 Mar 2023 |
- CVE-2021-4180739İzleyin
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.
KritikCVSS 9,8İstismar yokEPSS %1m-files · m-files server18 Oca 2022
- CVE-2023-691239İzleyin
Brute force vulnerability in M-Files user authentication
KritikCVSS 9,8İstismar yokEPSS %1m-files · m-files server20 Ara 2023
- CVE-2025-596437İzleyin
Path traversal in M-Files API
YüksekCVSS 8,4Kavram kanıtıEPSS %13m-files · m-files server15 Haz 2025
- CVE-2024-1012736İzleyin
Support for authentication bypass condition in M-Files LDAP authentication
KritikCVSS 9,2İstismar yokEPSS %1m-files · m-files server20 Kas 2024
- CVE-2023-623935İzleyin
Incorrect calculation of effective permissions
YüksekCVSS 8,8İstismar yokEPSS %1m-files · m-files server28 Kas 2023
- CVE-2022-3901635İzleyin
Javascript injection in PDFtron in M-Files Hubshare
YüksekCVSS 8,8İstismar yokEPSS %1m-files · hubshare31 Eki 2022
- CVE-2024-688134İzleyin
Stored XSS Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0m-files · hubshare29 Tem 2024
- CVE-2024-612434İzleyin
Reflected XSS in Hubshare via Open Redirect
YüksekCVSS 8,5İstismar yokEPSS %0m-files · hubshare29 Tem 2024
- CVE-2024-678933İzleyin
Path traversal in M-Files API
YüksekCVSS 8,4İstismar yokEPSS %1m-files · m-files server27 Ağu 2024
- CVE-2021-3725331İzleyin
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range head
YüksekCVSS 7,5İstismar yokEPSS %3m-files · m-files web5 Ara 2021
- CVE-2023-552331İzleyin
M-Files Web Companion allows Remote Code Execution
YüksekCVSS 7,8İstismar yokEPSS %0m-files · web companion20 Eki 2023
- CVE-2023-021331İzleyin
Local Elevation of Privilege in M-Files
YüksekCVSS 7,8İstismar yokEPSS %0m-files · m-files29 Mar 2023
- CVE-2023-248031İzleyin
Elevation of Privilege in M-Files Desktop Client
YüksekCVSS 7,8İstismar yokEPSS %0m-files · m-files25 May 2023
- CVE-2023-211231İzleyin
Desktop component allows lateral movement between sessions
YüksekCVSS 7,8İstismar yokEPSS %0m-files · m-files server20 Nis 2023
- CVE-2021-3725430İzleyin
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated acce
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files web28 Eki 2021
- CVE-2023-340530İzleyin
Denial of service condition in M-Files Server
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server27 Haz 2023
- CVE-2023-038330İzleyin
Uncontrolled Resource Consuption in M-Files Server
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server20 Nis 2023
- CVE-2023-038430İzleyin
Uncontrolled Resource Consuption in M-Files Server
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server20 Nis 2023
- CVE-2024-405630İzleyin
Denial of service condition in M-Files Server
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server26 Nis 2024
- CVE-2023-611730İzleyin
M-Files REST API allows Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server22 Kas 2023
- CVE-2022-328430İzleyin
Insecure way of passing a download key
YüksekCVSS 7,5İstismar yokEPSS %1m-files · m-files server6 Mar 2023
- CVE-2022-485830İzleyin
Insertion of Sensitive Information into Log File
YüksekCVSS 7,5İstismar yokEPSS %0m-files · m-files server30 Ara 2022
- CVE-2022-3901830İzleyin
Broken access controls on PDFtron data in M-Files Hubshare
YüksekCVSS 7,5İstismar yokEPSS %0m-files · hubshare31 Eki 2022
- CVE-2022-3901930İzleyin
Broken access controls on PDFtron WebviewerUI in M-Files Hubshare
YüksekCVSS 7,5İstismar yokEPSS %0m-files · hubshare31 Eki 2022
- CVE-2022-486230İzleyin
XSS vulnerability in M-Files Web
YüksekCVSS 7,6İstismar yokEPSS %0m-files · m-files server6 Mar 2023