Vulnerabilidades en M-Files

30 resultados
Análisis Vexday

M-Files apresenta 30 CVEs catalogados, predominantemente relacionados a exposição de informações (CWE-200), sem registros de exploração ativa ou vulnerabilidades críticas. O perfil de risco é moderado e estável, com nenhuma divulgação recente nos últimos 90 dias, indicando um cenário não-crítico para tomadores de decisão.

CVE-2022-39018HIGHBroken access controls on PDFtron data in M-Files HubshareEPSS 0.4%CVE-2022-39019MEDIUMBroken access controls on PDFtron WebviewerUI in M-Files HubshareEPSS 0.4%CVE-2022-39017HIGHXSS in all comments fields in M-Files HubshareEPSS 0.4%CVE-2022-4862MEDIUMXSS vulnerability in M-Files WebEPSS 0.4%CVE-2023-5523HIGHM-Files Web Companion allows Remote Code ExecutionEPSS 0.3%CVE-2023-5524HIGHM-Files Web Companion allows Remote Code Execution for some filetypesEPSS 0.3%CVE-2021-41808LOWIn M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.EPSS 0.2%CVE-2023-0213HIGHLocal Elevation of Privilege in M-FilesEPSS 0.2%CVE-2023-2480HIGHElevation of Privilege in M-Files Desktop ClientEPSS 0.2%CVE-2023-2112LOWDesktop component allows lateral movement between sessionsEPSS 0.2%