Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-0931

Denial-of-service vulnerability in M-Files Server

Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
M-files
Products
Server
CVE-2025-13008

Session Token Disclosure in M-Files Web

An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and 24.8 LTS SR5 allows an authenticated attacker using M-Files Web to capture session tokens of other active users.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
M-files M-files Corporation
Products
M-files Server Server M-files Server
CVE-2021-41810

Script injection in M-Files Admin

Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level authentication and is not remotely exploitable

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
M-files
Products
Server
CVE-2025-14318

Improper access validation in M-Files Server

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
M-files
Products
M-files Server Server
CVE-2025-14267

Unintended temporary cached data included in a structure only copy intended to be empty of data

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows data leak exposure affecting versions before 25.12.15491.7

CVSS 4.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
M-files
Products
M-files M-files Server Server
CVE-2025-11681

Denial of Service condition in M-Files Server

Denial-of-service condition in M-Files Server versions before 25.11.15392.1, before 25.2 LTS SR2 and before 25.8 LTS SR2 allows an authenticated user to cause the MFserver process to crash.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
M-files
Products
M-files Server Server