Vulnerabilities (CVE)

Filtered by vendor M-files Subscribe
Filtered by product M-files Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6239 1 M-files 1 M-files Server 2023-12-04 N/A 8.8 HIGH
Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven permissions in M-Files Server versions 23.9, 23.10, and 23.11 before 23.11.13168.7, potentially enabling unauthorized access to the object.
CVE-2023-6117 1 M-files 1 M-files Server 2023-11-30 N/A 7.5 HIGH
A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server before 23.11.13156.0 which allows attackers to execute DoS attacks.