Filez Client
Approved changes feed: RSS · Atom
cpe:2.3:a:lenovo:filez_client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Filez Client (9a610909-d1a0-5746-8bd4-3222babe5711) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6249 |
vulnerable | 2026-06-08 07:43:14.616261 |
Details available
MEDIUM (6.7)
An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data.
Published: 2025-07-17T19:20:01.009Z
Updated: 2025-07-17T20:06:40.536Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2070 |
vulnerable | 2026-06-08 07:14:57.859581 |
Details available
MEDIUM (5)
An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user.
Published: 2025-04-25T15:27:19.989Z
Updated: 2025-04-25T16:46:25.734Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2069 |
vulnerable | 2026-06-08 07:14:57.859210 |
Details available
MEDIUM (5)
A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user.
Published: 2025-04-25T15:26:55.806Z
Updated: 2025-04-25T16:47:20.616Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2068 |
vulnerable | 2026-06-08 07:14:57.858573 |
Details available
MEDIUM (5)
An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user.
Published: 2025-04-25T15:26:34.159Z
Updated: 2025-04-25T16:48:08.800Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8058 |
vulnerable | 2026-06-08 06:58:24.293941 |
Details available
HIGH (7.6)
An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.
Published: 2024-12-16T17:04:30.539Z
Updated: 2025-08-27T21:43:06.241Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.