CVE-2022-4270

LOW

M-Files Server < 22.5.11436.1 - Incorrect Privilege Assignment in M-Files Web

Title source: llm

Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.

Core 3

Core References

Various Sources vendor-advisory

Vendor Advisory

Various Sources vendor-advisory

CVSS v3 2.0

EPSS 0.0051

EPSS Percentile 39.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-269

Status published

Products (1)

m-files/m-files_server < 22.5.11436.1

Published Dec 02, 2022

Tracked Since Feb 18, 2026