TI-2025-02697 CVE-2025-3087 · GHSA-hjj2-4jq5-9f5q
Stored XSS Vulnerability in M-Files Web
Priority LOW 23
Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts
Vulnerabilities
4 records
TI-2021-18438 CVE-2021-41807 · GHSA-5c8j-7c6c-838x
Missing brute-force protection in M-Files Server
Priority MEDIUM 44
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts ea…
TI-2021-15287 CVE-2021-37253 · GHSA-gpcr-2fv6-73fj
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in…
Priority HIGH 72
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers).
TI-2021-15288 CVE-2021-37254 · GHSA-gjv4-q69q-pgqc
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote…
Priority LOW 36
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key information on server.