CVSS 3.1 Score 7.5 of 10 (high)


Published Dec 20, 2023
Updated: Dec 28, 2023
CWE ID 307


CVE-2023-6912 is a vulnerability that affects M-Files Server before version 23.12.13205.0. It is categorized as a high-risk vulnerability with a base score of 7.5 and a confidentiality impact of HIGH. The vulnerability allows attackers to perform unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords. The exploitability score is 3.9, indicating that it is relatively easy for attackers to take advantage of this vulnerability. The attack vector is through the network, and no user interaction or privileges are required. The impact score is 3.6, indicating a significant risk to confidentiality. To remediate this vulnerability, organizations should update their M-Files Server to version 23.12.13205.0 or higher to ensure protection against brute force attacks and secure user accounts from unauthorized access.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6912 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options