Login Request a demo
MW
Product
M-Files Web
by M-Files · last CVE Apr 4, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add M-Files Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-37253
7.5
3%
Dec 5
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers)
Affected: before 20.10.9524.1
CVE-2021-37254
7.5
1%
Oct 28
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key…
Affected: before 20.10.9445.0; 20.10.9500.0 before 20.10.9534.1
Showing 2