CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6912

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.4%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-6912

M-Files » M-Files Server » Version: N/A

cpe:2.3:a:m-files:m-files_server:-
M-Files » M-Files Server » Version: 22.11.12011.0

cpe:2.3:a:m-files:m-files_server:22.11.12011.0
M-Files » M-Files Server » Version: 22.12.12140.3

cpe:2.3:a:m-files:m-files_server:22.12.12140.3
M-Files » M-Files Server » Version: 22.2.11051.0

cpe:2.3:a:m-files:m-files_server:22.2.11051.0
M-Files » M-Files Server » Version: 22.3.11237.3

cpe:2.3:a:m-files:m-files_server:22.3.11237.3
M-Files » M-Files Server » Version: 22.6.11534.4

cpe:2.3:a:m-files:m-files_server:22.6.11534.4
M-Files » M-Files Server » Version: 23.12.13195.0

cpe:2.3:a:m-files:m-files_server:23.12.13195.0
M-Files » M-Files Server » Version: 23.4.12455.0

cpe:2.3:a:m-files:m-files_server:23.4.12455.0
M-Files » M-Files Server » Version: 23.4.12528.1

cpe:2.3:a:m-files:m-files_server:23.4.12528.1
M-Files » M-Files Server » Version: 23.6.12695.3

cpe:2.3:a:m-files:m-files_server:23.6.12695.3
M-Files » M-Files Server » Version: 23.9

cpe:2.3:a:m-files:m-files_server:23.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6912

Products

Pricing

Contact Us