M-files vulnerabilities

Products

• Server 34
• Server 14
• Hubshare 9
• M-files 5
• Web 5
• Web 4
• Classic Web 3
• Client 2
• New Web 2
• Web Companion 2
• Web Companion 2

Newest

• m-files server Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document... CVE-2026-0932 6.9 MediumApril 1, 2026
• m-files server Denial of Service condition in M-Files Server CVE-2026-0663 6.9 MediumJanuary 21, 2026
• m-files server Unintended temporary cached data included in a structure only copy intended to be empty of data CVE-2025-14267 5.6 MediumDecember 19, 2025
• m-files server Improper access validation in M-Files Server CVE-2025-14318 5.3 MediumDecember 18, 2025
• m-files server Denial of Service condition in M-Files Server CVE-2025-11681 7.1 HighNovember 17, 2025
• m-files hubshare Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows... CVE-2025-9826 7.0 HighSeptember 15, 2025
• m-files mobile Open redirection in M-Files Mobile CVE-2025-2091 4.8 MediumJune 16, 2025
• m-files server Path traversal in M-Files API CVE-2025-5964 Public exploit EPSS 13.0% 8.4 HighJune 15, 2025
• m-files web Stored XSS Vulnerability in M-Files Web CVE-2025-3087 5.1 MediumApril 4, 2025
• m-files server User in anonymous role could create and delete views CVE-2025-3086 6.3 MediumApril 4, 2025
• m-files server Denial of Service condition in M-Files Server CVE-2025-0635 6.3 MediumJanuary 23, 2025
• m-files server Unsafe stored password recovery CVE-2025-0619 4.6 MediumJanuary 23, 2025
• m-files server M-Files Server crash via EOT database driver configuration CVE-2025-0648 5.9 MediumJanuary 23, 2025
• m-files server Local file inclusion vulnerability in M-Files Server CVE-2024-10126 5.3 MediumNovember 20, 2024
• m-files, m-files server +1 more Support for authentication bypass condition in M-Files LDAP authentication CVE-2024-10127 9.2 CriticalNovember 20, 2024
• m-files hubshare Stored HTML Injection in Hubshare social module CVE-2024-9174 6.9 MediumOctober 2, 2024
• m-files server Path traversal in M-Files API CVE-2024-6789 8.4 HighAugust 27, 2024
• m-files hubshare Reflected XSS in Hubshare via Open Redirect CVE-2024-6124 8.5 HighJuly 29, 2024
• m-files hubshare Stored XSS Vulnerability CVE-2024-6881 8.5 HighJuly 29, 2024
• m-files hubshare XSS in Hubshare's social module CVE-2024-5142 7.0 HighMay 24, 2024
• m-files server Denial of service condition in M-Files Server CVE-2024-4056 7.5 HighApril 26, 2024
• m-files, m-files corporation web +1 more Stored XSS Vulnerability in M-Files Web CVE-2023-4479 7.3 HighMarch 4, 2024
• m-files server Denial of service condition in M-Files Server CVE-2024-0563 4.3 MediumFebruary 23, 2024
• m-files server Uncontrolled Resource Consumption in M-Files Server CVE-2023-6910 6.5 MediumDecember 20, 2023
• m-files server Brute force vulnerability in M-Files user authentication CVE-2023-6912 7.5 HighDecember 20, 2023
• m-files server Incorrect calculation of effective permissions CVE-2023-6239 5.4 MediumNovember 28, 2023
• m-files server Improper Permission Handling in M-Files Server CVE-2023-6189 4.3 MediumNovember 22, 2023
• m-files server M-Files REST API allows Denial of Service CVE-2023-6117 5.7 MediumNovember 22, 2023
• lavasoft web companion M-Files Web Companion allows Remote Code Execution for some filetypes CVE-2023-5524 8.2 HighOctober 20, 2023
• lavasoft web companion M-Files Web Companion allows Remote Code Execution CVE-2023-5523 8.6 HighOctober 20, 2023
• m-files classic web, web +1 more Stored XSS Vulnerability in M-Files Classic Web CVE-2023-2325 7.3 HighOctober 20, 2023
• m-files classic web, web +1 more Path traversal issue in M-Files Classic Web CVE-2023-3406 7.7 HighAugust 25, 2023
• m-files server, classic web +1 more CVE-2023-3425: Out-of-Bounds memory read CVE-2023-3425 6.5 MediumAugust 25, 2023
• m-files server Denial of service condition in M-Files Server CVE-2023-3405 7.5 HighJune 27, 2023
• m-files, m-files client +1 more Elevation of Privilege in M-Files Desktop Client CVE-2023-2480 7.5 HighMay 25, 2023
• m-files desktop, server +1 more Desktop component allows lateral movement between sessions CVE-2023-2112 3.6 LowApril 20, 2023
• m-files server Uncontrolled Resource Consuption in M-Files Server CVE-2023-0384 6.5 MediumApril 20, 2023
• m-files server Uncontrolled Resource Consuption in M-Files Server CVE-2023-0383 7.5 HighApril 20, 2023
• m-files server Uncontrolled Resource Consumption in M-Files Server CVE-2023-0382 6.5 MediumApril 5, 2023
• m-files Local Elevation of Privilege in M-Files CVE-2023-0213 8.8 HighMarch 29, 2023
• m-files new web, server +1 more XSS vulnerability in M-Files Web CVE-2022-4862 5.0 MediumMarch 6, 2023
• m-files new web, server +1 more Insecure way of passing a download key CVE-2022-3284 6.5 MediumMarch 6, 2023
• m-files client Incorrect Implementation of Authentication Algorithm CVE-2022-4861 4.8 MediumDecember 30, 2022
• m-files server Insertion of Sensitive Information into Log File CVE-2022-4858 4.4 MediumDecember 30, 2022
• m-files, m-files web +1 more Incorrect privilege assignment in M-Files Web Server CVE-2022-4264 6.5 MediumDecember 9, 2022
• m-files web, server +1 more Incorrect privilege assignment in M-Files Web Server CVE-2022-4270 2.0 LowDecember 2, 2022
• m-files server Information disclosure in M-Files Server CVE-2022-1911 5.3 MediumNovember 30, 2022
• m-files server Incorrect privilege assignment in M-Files Server CVE-2022-1606 2.4 LowNovember 30, 2022
• m-files hubshare Broken access controls on PDFtron data in M-Files Hubshare CVE-2022-39018 8.2 HighOctober 31, 2022
• m-files hubshare Broken access controls on PDFtron WebviewerUI in M-Files Hubshare CVE-2022-39019 6.3 MediumOctober 31, 2022
• Show olderLoading…