Vulnerabilities (CVE)

Filtered by vendor M-files Subscribe
Filtered by product M-files Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6912 1 M-files 1 M-files Server 2023-12-28 N/A 9.8 CRITICAL
Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.
CVE-2021-41807 1 M-files 2 M-files Server, M-files Web 2022-01-26 5.0 MEDIUM 9.8 CRITICAL
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.