M-files Server vulnerabilities

• m-files server Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document... CVE-2026-0932 6.9 MediumApril 1, 2026
• m-files server Denial of Service condition in M-Files Server CVE-2026-0663 6.9 MediumJanuary 21, 2026
• m-files server Unintended temporary cached data included in a structure only copy intended to be empty of data CVE-2025-14267 5.6 MediumDecember 19, 2025
• m-files server Improper access validation in M-Files Server CVE-2025-14318 5.3 MediumDecember 18, 2025
• m-files server Denial of Service condition in M-Files Server CVE-2025-11681 7.1 HighNovember 17, 2025
• m-files server Path traversal in M-Files API CVE-2025-5964 Public exploit EPSS 13.0% 8.4 HighJune 15, 2025
• m-files server User in anonymous role could create and delete views CVE-2025-3086 6.3 MediumApril 4, 2025
• m-files server Denial of Service condition in M-Files Server CVE-2025-0635 6.3 MediumJanuary 23, 2025
• m-files server Unsafe stored password recovery CVE-2025-0619 4.6 MediumJanuary 23, 2025
• m-files server M-Files Server crash via EOT database driver configuration CVE-2025-0648 5.9 MediumJanuary 23, 2025
• m-files server Local file inclusion vulnerability in M-Files Server CVE-2024-10126 5.3 MediumNovember 20, 2024
• m-files, m-files server +1 more Support for authentication bypass condition in M-Files LDAP authentication CVE-2024-10127 9.2 CriticalNovember 20, 2024
• m-files server Path traversal in M-Files API CVE-2024-6789 8.4 HighAugust 27, 2024
• m-files server Denial of service condition in M-Files Server CVE-2024-4056 7.5 HighApril 26, 2024
• m-files server Denial of service condition in M-Files Server CVE-2024-0563 4.3 MediumFebruary 23, 2024
• m-files server Uncontrolled Resource Consumption in M-Files Server CVE-2023-6910 6.5 MediumDecember 20, 2023
• m-files server Brute force vulnerability in M-Files user authentication CVE-2023-6912 7.5 HighDecember 20, 2023
• m-files server Incorrect calculation of effective permissions CVE-2023-6239 5.4 MediumNovember 28, 2023
• m-files server Improper Permission Handling in M-Files Server CVE-2023-6189 4.3 MediumNovember 22, 2023
• m-files server M-Files REST API allows Denial of Service CVE-2023-6117 5.7 MediumNovember 22, 2023
• m-files server Denial of service condition in M-Files Server CVE-2023-3405 7.5 HighJune 27, 2023
• m-files desktop, server +1 more Desktop component allows lateral movement between sessions CVE-2023-2112 3.6 LowApril 20, 2023
• m-files server Uncontrolled Resource Consuption in M-Files Server CVE-2023-0384 6.5 MediumApril 20, 2023
• m-files server Uncontrolled Resource Consuption in M-Files Server CVE-2023-0383 7.5 HighApril 20, 2023
• m-files server Uncontrolled Resource Consumption in M-Files Server CVE-2023-0382 6.5 MediumApril 5, 2023
• m-files new web, server +1 more XSS vulnerability in M-Files Web CVE-2022-4862 5.0 MediumMarch 6, 2023
• m-files new web, server +1 more Insecure way of passing a download key CVE-2022-3284 6.5 MediumMarch 6, 2023
• m-files server Insertion of Sensitive Information into Log File CVE-2022-4858 4.4 MediumDecember 30, 2022
• m-files web, server +1 more Incorrect privilege assignment in M-Files Web Server CVE-2022-4270 2.0 LowDecember 2, 2022
• m-files server Information disclosure in M-Files Server CVE-2022-1911 5.3 MediumNovember 30, 2022
• m-files server Incorrect privilege assignment in M-Files Server CVE-2022-1606 2.4 LowNovember 30, 2022
• m-files server In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs. CVE-2021-41808 2.0 LowJanuary 18, 2022
• m-files server, web +1 more Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. CVE-2021-41807 7.5 HighJanuary 18, 2022
• m-files server SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server. CVE-2021-41809 3.5 LowJanuary 18, 2022