CVE-2023-6912highCWE-307

CVE-2023-6912: falha de alta gravidade em M-Files Server

Brute force vulnerability in M-Files user authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar M-Files Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.0%
Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
M-Files Corporation · M-Files Server
CVEs relacionadas — M-Files Server

No mesmo produto, das mais perigosas para as menos.

CVE-2025-5964HIGHPath traversal in M-Files APIEPSS 13.0%CVE-2023-6910MEDIUMUncontrolled Resource Consumption in M-Files ServerEPSS 0.9%CVE-2024-4056HIGHDenial of service condition in M-Files ServerEPSS 0.8%CVE-2021-41810MEDIUMScript injection in M-Files AdminEPSS 0.7%CVE-2024-0563MEDIUMDenial of service condition in M-Files ServerEPSS 0.7%CVE-2024-10127CRITICALSupport for authentication bypass condition in M-Files LDAP authenticationEPSS 0.6%