Read the docs

M-Files Corporation

Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

M-Files Corporation records in CISA KEV

No M-Files Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M-files Server 34 records MEDIUM Hubshare 9 records LOW M-files 4 records LOW M-files Web 4 records HIGH Classic Web 3 records LOW Web Companion 2 records LOW M-files Client 1 record LOW M-files Mobile 1 record LOW

Records

2 records in Web Companion · all components

TI-2023-05082 CVE-2023-5523 · GHSA-94xm-wg2w-cvfq

M-Files Web Companion allows Remote Code Execution

Priority LOW 39

Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00342 Published 2023-10-20 Fixed in 23.10, 23.8 LTS SR1 CWE-829
TI-2023-05083 CVE-2023-5524 · GHSA-r2vj-428g-v68v

M-Files Web Companion allows Remote Code Execution for some filetypes

Priority LOW 38

Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00329 Published 2023-10-20 Fixed in 23.10, 23.8 LTS SR1 CWE-434
Open these records in search →