M-files
M-files Hubshare: vulnerabilidades y CVE
M-files Hubshare tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-9826 | Alta (7) | 0.26% | — | 15 sept 2025 | Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users. |
| CVE-2024-9174 | Media (6.9) | 0.29% | — | 2 oct 2024 | Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI |
| CVE-2024-6881 | Alta (8.5) | 0.35% | — | 29 jul 2024 | Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session |
| CVE-2024-6124 | Alta (8.5) | 0.30% | — | 29 jul 2024 | Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session |
| CVE-2024-5142 | Alta (7) | 0.31% | — | 24 may 2024 | Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser |
| CVE-2022-39019 | Alta (7.5) | 0.39% | — | 31 oct 2022 | Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server. |
| CVE-2022-39018 | Alta (7.5) | 0.41% | — | 31 oct 2022 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. |
| CVE-2022-39017 | Media (5.4) | 0.39% | — | 31 oct 2022 | Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments. |
| CVE-2022-39016 | Alta (8.8) | 0.52% | — | 31 oct 2022 | Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload. |