Approved changes feed: RSS · Atom

cpe:2.3:a:m-files_corporation:m-files_web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorM Files Corporation (2362f32a-0a24-5310-a96b-161849f50ffc)
ProductM Files Web (403b43cd-e2f9-56e9-8395-2edf13241df1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3087 vulnerable 2026-06-08 07:23:08.095430 Stored XSS Vulnerability in M-Files Web
Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts
Published: 2025-04-04T06:40:07.210Z
Updated: 2026-02-23T10:27:46.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4479 vulnerable 2026-06-08 06:16:12.531687 Stored XSS Vulnerability in M-Files Web
HIGH (7.3)
Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period.
Published: 2024-03-04T07:17:20.299Z
Updated: 2026-02-23T08:50:20.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.