Read the docs

M-Files Corporation

Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

M-Files Corporation records in CISA KEV

No M-Files Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M-files Server 34 records MEDIUM Hubshare 9 records LOW M-files 4 records LOW M-files Web 4 records HIGH Classic Web 3 records LOW Web Companion 2 records LOW M-files Client 1 record LOW M-files Mobile 1 record LOW

Records

1 record in M-files Client · all components

TI-2022-04454 CVE-2022-4861 · GHSA-qx2w-wx28-8mhv

Incorrect Implementation of Authentication Algorithm

Priority LOW 23

Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00584 Published 2022-12-30 Fixed in 22.5.11356.0 CWE-303
Open these records in search →