M-files Corporation vulnerabilities
64 CVEs and advisories name M-files Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-41810Script injection in M-Files Admin
- CVE-2021-41808In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.
- CVE-2021-41807Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.
- CVE-2021-41809SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.