Total
9 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-9826 | 1 M-files | 1 Hubshare | 2026-02-23 | N/A | 5.4 MEDIUM |
|
Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users.
|
|||||
| CVE-2024-9174 | 1 M-files | 1 Hubshare | 2026-02-23 | N/A | 5.4 MEDIUM |
|
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI
|
|||||
| CVE-2024-6881 | 1 M-files | 1 Hubshare | 2026-02-23 | N/A | 5.4 MEDIUM |
|
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session
|
|||||
| CVE-2024-6124 | 1 M-files | 1 Hubshare | 2026-02-23 | N/A | 5.4 MEDIUM |
|
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session
|
|||||
| CVE-2024-5142 | 1 M-files | 1 Hubshare | 2026-02-23 | N/A | 5.4 MEDIUM |
|
Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser
|
|||||
| CVE-2022-39019 | 1 M-files | 1 Hubshare | 2024-11-21 | N/A | 6.3 MEDIUM |
|
Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.
|
|||||
| CVE-2022-39018 | 1 M-files | 1 Hubshare | 2024-11-21 | N/A | 8.2 HIGH |
|
Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.
|
|||||
| CVE-2022-39017 | 1 M-files | 1 Hubshare | 2024-11-21 | N/A | 8.2 HIGH |
|
Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.
|
|||||
| CVE-2022-39016 | 1 M-files | 1 Hubshare | 2024-11-21 | N/A | 8.2 HIGH |
|
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.
|
|||||