CVE-2023-3405
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service.
Risk Assessment
The organization may be vulnerable to denial of service attacks, potentially leading to system downtime and loss of access to critical data.
Recommendation
It is recommended to update M-Files Server to version 23.6.12695.3 or newer to mitigate this vulnerability.
Other vulnerabilities in M-Files Server
See all- CVE-2026-0931Medium
Denial-of-service vulnerability in M-Files Server before version 26.5.16015.3 allows an authenticated admin user to crash the server process and prevent it from restarting.
- CVE-2026-0983High
In M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3, a denial-of-service vulnerability exists. This allows an authenticated user to cause the MFserver process to crash.
- CVE-2023-3425Medium
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
Original NVD description (English source)
Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service