Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
FileWave records in CISA KEVNo FileWave vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 59
An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16372 · Published 2022-07-25 · No fix listed CWE-798
Priority MEDIUM 46
A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10903 · Published 2022-07-25 · No fix listed CWE-798
Priority LOW 36
The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.
CVSS 3.1HIGH 8.1· Local · No auth · No interaction · EPSS 0.00142 · Published 2025-04-21 · Fixed in 16.0.0 CWE-863
