MS
Product
M-Files Server
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 13Low 0
Watch
Add M-Files Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10127 | 9.8 | Nov 20 | Support for authentication bypass condition in M-Files LDAP authentication Affected: before 24.11 |
| CVE-2023-6912 | 9.8 | Dec 20 | Brute force vulnerability in M-Files user authentication Affected: before 23.12.13205.0 |
| CVE-2025-13008 | 8.6 | Dec 19 | Session Token Disclosure in M-Files Web Affected: before 25.12.15491.7 |
| CVE-2025-0635 | 7.5 | Jan 23 | Denial of Service condition in M-Files Server Affected: before 25.1.14445.5 |
| CVE-2024-4056 | 7.5 | Apr 26 | Denial of service condition in M-Files Server Affected: 23.11 before 24.4.13592.4 |
| CVE-2026-0932 | 7.3 | Apr 1 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated… Affected: before 26.3.15818.5 |
| CVE-2026-0983 | 7.1 | May 18 | Denial of service vulnerability in M-Files Server Affected: before 26.5.16015.0; LTS 25.8.15085.13 before LTS 25.8.15085.24; LTS 26.2.15718.8 before LTS 26.2.15718.10 |
| CVE-2025-3086 | 7.1 | Apr 4 | User in anonymous role could create and delete views Affected: before 25.3.14549 |
| CVE-2026-0931 | 6.9 | Aug 5 | Denial-of-service vulnerability in M-Files Server Affected: before 26.5.16015.3 |
| CVE-2025-11681 | 6.5 | Nov 17 | Denial of Service condition in M-Files Server Affected: before 25.11.15392.1 |
| CVE-2025-5964 | 6.5 | Jun 15 | Path traversal in M-Files API Affected: before 25.6.14925.0 |
| CVE-2024-6789 | 6.5 | Aug 27 | Path traversal in M-Files API Affected: before 24.8.13981.0; LTS 24.2.0 before LTS 24.2.13421.15 SR2; LTS 23.8.0 before LTS 23.8.12892.0 SR6 |
| CVE-2024-0563 | 6.5 | Feb 23 | Denial of service condition in M-Files Server Affected: before 24.2 |
| CVE-2023-6910 | 6.5 | Dec 20 | Uncontrolled Resource Consumption in M-Files Server Affected: before 23.12.13195.0 |
| CVE-2026-0663 | 4.9 | Jan 21 | Denial of Service condition in M-Files Server Affected: before 26.1.15632.3 |
| CVE-2025-14267 | 4.9 | Dec 19 | Unintended temporary cached data included in a structure only copy intended to be empty of data Affected: before 25.12.15491.7 |
| CVE-2025-0619 | 4.9 | Jan 23 | Unsafe stored password recovery Affected: before 25.1.14445.5 |
| CVE-2025-0648 | 4.9 | Jan 23 | M-Files Server crash via EOT database driver configuration Affected: before 25.1.14445.5 |
| CVE-2021-41810 | 4.8 | May 2 | Script injection in M-Files Admin Affected: M-Files Server before 22.2.11051.0 |
| CVE-2025-14318 | 4.3 | Dec 18 | Improper access validation in M-Files Server Affected: before 25.12.15491.7 |
| CVE-2024-10126 | 4.3 | Nov 20 | Local file inclusion vulnerability in M-Files Server Affected: before 24.11 |
Showing 21