Approved changes feed: RSS · Atom

cpe:2.3:a:m-files:m-files_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorM Files (eb040204-ad59-500e-add5-a0873eedc68c)
ProductM Files Client (8e8ab931-f49e-599b-9c81-f21170d29029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2480 vulnerable 2026-06-08 06:02:42.377638 Elevation of Privilege in M-Files Desktop Client
HIGH (7.5)
Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications
Published: 2023-05-25T13:28:29.204Z
Updated: 2026-02-23T08:42:43.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4861 vulnerable 2026-06-08 05:52:00.484352 Incorrect Implementation of Authentication Algorithm
MEDIUM (4.8)
Incorrect implementation in authentication protocol in M-Files Client before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.
Published: 2022-12-30T13:31:21.079Z
Updated: 2026-02-23T08:13:57.523Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.