Note:
This project will be discontinued after December 13, 2021. [more]
Product:
M\-Files
(M\-Files)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 4 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-03-04 | CVE-2023-4479 | Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period. | M\-Files | 5.4 | ||
| 2022-12-09 | CVE-2022-4264 | Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration. | M\-Files | 4.3 | ||
| 2023-03-29 | CVE-2023-0213 | Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges via DLL hijacking. | M\-Files | 7.8 | ||
| 2023-05-25 | CVE-2023-2480 | Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications | M\-Files | 7.8 |