Skip to contentM-files Corporation Server vulnerabilities
- m-files corporation serverDenial-of-service vulnerability in M-Files ServerCVE-2026-09316.9 Medium
- m-files corporation serverDenial of service vulnerability in M-Files ServerCVE-2026-09837.1 High
- m-files serverBlind server-side request forgery (SSRF) vulnerability in legacy connection methods of document...CVE-2026-09326.9 Medium
- m-files serverDenial of Service condition in M-Files ServerCVE-2026-06636.9 Medium
- m-files corporation serverSession Token Disclosure in M-Files WebCVE-2025-130088.6 High
- m-files serverUnintended temporary cached data included in a structure only copy intended to be empty of dataCVE-2025-142675.6 Medium
- m-files serverImproper access validation in M-Files ServerCVE-2025-143185.3 Medium
- m-files serverDenial of Service condition in M-Files ServerCVE-2025-116817.1 High
- m-files serverPath traversal in M-Files APICVE-2025-5964Public exploitEPSS 13.6%8.4 High
- m-files serverUser in anonymous role could create and delete viewsCVE-2025-30866.3 Medium
- m-files serverDenial of Service condition in M-Files ServerCVE-2025-06356.3 Medium
- m-files serverUnsafe stored password recoveryCVE-2025-06194.6 Medium
- m-files serverM-Files Server crash via EOT database driver configurationCVE-2025-06485.9 Medium
- m-files serverLocal file inclusion vulnerability in M-Files ServerCVE-2024-101265.3 Medium
- m-files, m-files server +1 moreSupport for authentication bypass condition in M-Files LDAP authenticationCVE-2024-101279.2 Critical
- m-files serverPath traversal in M-Files APICVE-2024-67898.4 High
- m-files serverDenial of service condition in M-Files ServerCVE-2024-40567.5 High
- m-files serverDenial of service condition in M-Files ServerCVE-2024-05634.3 Medium
- m-files serverUncontrolled Resource Consumption in M-Files ServerCVE-2023-69106.5 Medium
- m-files serverBrute force vulnerability in M-Files user authenticationCVE-2023-69127.5 High
- m-files serverIncorrect calculation of effective permissionsCVE-2023-62395.4 Medium
- m-files serverImproper Permission Handling in M-Files ServerCVE-2023-61894.3 Medium
- m-files serverM-Files REST API allows Denial of ServiceCVE-2023-61175.7 Medium
- m-files server, classic web +1 moreCVE-2023-3425: Out-of-Bounds memory readCVE-2023-34256.5 Medium
- m-files serverDenial of service condition in M-Files ServerCVE-2023-34057.5 High
- m-files serverUncontrolled Resource Consuption in M-Files ServerCVE-2023-03846.5 Medium
- m-files serverUncontrolled Resource Consuption in M-Files ServerCVE-2023-03837.5 High
- m-files serverUncontrolled Resource Consumption in M-Files ServerCVE-2023-03826.5 Medium
- m-files serverInsertion of Sensitive Information into Log FileCVE-2022-48584.4 Medium
- m-files serverInformation disclosure in M-Files ServerCVE-2022-19115.3 Medium
- m-files serverIncorrect privilege assignment in M-Files ServerCVE-2022-16062.4 Low
- m-files serverScript injection in M-Files AdminCVE-2021-418105.2 Medium
- m-files serverIn M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.CVE-2021-418082.0 Low
- m-files server, web +1 moreLack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.CVE-2021-418077.5 High
- m-files serverSSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.CVE-2021-418093.5 Low