Vulnerabilities

TI-2025-28489 CVE-2025-43922 · GHSA-j6gw-77pg-859q

Incorrect authorization in FileWave

LOW 36

The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00142 Published 2025-04-21 Fixed in 16.0.0 CWE-863

TI-2022-15696 CVE-2022-34906 · GHSA-w7p9-32gv-g2j3

MEDIUM 46

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10903 Published 2022-07-25 No fix listed CWE-798

TI-2022-15697 CVE-2022-34907 · GHSA-h25g-6x79-h5q2

MEDIUM 59

An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16372 Published 2022-07-25 No fix listed CWE-798