- How many CVEs does M-Files have?
- M-Files has 66 published CVE records since 2021, including 19 in the last two years.
- How many M-Files CVEs are in CISA KEV?
- None of M-Files's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which M-Files products have the most CVEs?
- The M-Files products with the most published CVEs are M-Files Server, M-Files Web, Hubshare, M-Files, classic web.
- What are the most common weakness types in M-Files CVEs?
- M-Files's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
- Are there public exploits for M-Files vulnerabilities?
- Yes — 1 of M-Files's CVEs have a known public exploit.
- How many critical M-Files vulnerabilities are there?
- M-Files has 3 critical and 32 high-severity CVEs.
- What is the average severity of M-Files CVEs?
- The average CVSS base score across M-Files's scored CVEs is 6.8.
