Approved changes feed: RSS · Atom

cpe:2.3:a:m-files:classic_web:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorM Files (eb040204-ad59-500e-add5-a0873eedc68c)
ProductClassic Web (8b9351cf-7e51-56e0-91a4-c0f01f84e980)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3425 vulnerable 2026-06-08 06:09:39.521546 CVE-2023-3425: Out-of-Bounds memory read
MEDIUM (6.5)
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
Published: 2023-08-25T08:08:05.954Z
Updated: 2026-02-23T08:48:57.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3406 vulnerable 2026-06-08 06:09:39.498624 Path traversal issue in M-Files Classic Web
HIGH (7.7)
Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server
Published: 2023-08-25T08:11:46.246Z
Updated: 2026-02-23T08:48:04.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2325 vulnerable 2026-06-08 06:02:42.077446 Stored XSS Vulnerability in M-Files Classic Web
HIGH (7.3)
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.
Published: 2023-10-20T06:39:44.747Z
Updated: 2026-02-23T08:40:56.290Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.