MC
Vendor
M-Files Corporation"
33
CVEs
0
On KEV
0
New 30D
Products
MS9.8
M-Files Server
M-Files Corporation"
20 CVEs0 on KEV0 new
HU5.4
Hubshare
M-Files Corporation
4 CVEs0 on KEV0 new
MW5.4
M-Files Web
M-Files Corporation
4 CVEs0 on KEV0 new
MA5.1
M-Files Admin
M-Files Corporation
1 CVEs0 on KEV0 new
MA5.3
M-Files Aino
M-Files Corporation
1 CVEs0 on KEV0 new
MC5.3
M-Files Connector for Copilot
M-Files Corporation
1 CVEs0 on KEV0 new
MH5.4
M-Files Hubshare
M-Files Corporation
1 CVEs0 on KEV0 new
MM5.4
M-Files Mobile
M-Files Corporation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18372 | MW M-Files Web M-Files Corporation | 4.8 | Aug 19 | CSS injection in M-Files Web |
| CVE-2026-18371 | MW M-Files Web M-Files Corporation | 5.1 | Aug 19 | HTML injection in M-Files Web |
| CVE-2026-0931 | MS M-Files Server M-Files Corporation | 6.9 | Aug 5 | Denial-of-service vulnerability in M-Files Server |
| CVE-2026-0983 | MS M-Files Server M-Files Corporation | 7.1 | May 18 | Denial of service vulnerability in M-Files Server |
| CVE-2026-0932 | MS M-Files Server M-Files Corporation | 7.3 | Apr 1 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated… |
| CVE-2026-0663 | MS M-Files Server M-Files Corporation | 4.9 | Jan 21 | Denial of Service condition in M-Files Server |
| CVE-2025-13008 | MS M-Files Server M-Files Corporation | 8.6 | Dec 19 | Session Token Disclosure in M-Files Web |
| CVE-2025-14267 | MS M-Files Server M-Files Corporation | 4.9 | Dec 19 | Unintended temporary cached data included in a structure only copy intended to be empty of data |
| CVE-2025-14318 | MS M-Files Server M-Files Corporation | 4.3 | Dec 18 | Improper access validation in M-Files Server |
| CVE-2025-11681 | MS M-Files Server M-Files Corporation | 6.5 | Nov 17 | Denial of Service condition in M-Files Server |
| CVE-2025-9826 | HU Hubshare M-Files Corporation | 5.4 | Sep 15 | Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users |
| CVE-2025-2091 | MM M-Files Mobile M-Files Corporation | 5.4 | Jun 16 | Open redirection in M-Files Mobile |
| CVE-2025-5964 | MS M-Files Server M-Files Corporation | 6.5 | Jun 15 | Path traversal in M-Files API |
| CVE-2025-3087 | MW M-Files Web M-Files Corporation | 5.4 | Apr 4 | Stored XSS Vulnerability in M-Files Web |
| CVE-2025-3086 | MS M-Files Server M-Files Corporation | 7.1 | Apr 4 | User in anonymous role could create and delete views |
| CVE-2025-2159 | MA M-Files Admin M-Files Corporation | 5.1 | Apr 4 | Stored XSS in M-Files Admin user interface |
| CVE-2025-0635 | MS M-Files Server M-Files Corporation | 7.5 | Jan 23 | Denial of Service condition in M-Files Server |
| CVE-2025-0619 | MS M-Files Server M-Files Corporation | 4.9 | Jan 23 | Unsafe stored password recovery |
| CVE-2025-0648 | MS M-Files Server M-Files Corporation | 4.9 | Jan 23 | M-Files Server crash via EOT database driver configuration |
| CVE-2024-10126 | MS M-Files Server M-Files Corporation" | 4.3 | Nov 20 | Local file inclusion vulnerability in M-Files Server |
| CVE-2024-10127 | MS M-Files Server M-Files Corporation | 9.8 | Nov 20 | Support for authentication bypass condition in M-Files LDAP authentication |
| CVE-2024-11176 | MA M-Files Aino M-Files Corporation | 5.3 | Nov 20 | Incorrect evaluation of effective permissions in M-Files Aino |
| CVE-2024-9333 | MC M-Files Connector for Copilot M-Files Corporation | 5.3 | Oct 2 | Permission bypass in M-Files Connector for Copilot |
| CVE-2024-9174 | MH M-Files Hubshare M-Files Corporation | 5.4 | Oct 2 | Stored HTML Injection in Hubshare social module |
| CVE-2024-6789 | MS M-Files Server M-Files Corporation | 6.5 | Aug 27 | Path traversal in M-Files API |
| CVE-2024-6124 | HU Hubshare M-Files Corporation | 5.4 | Jul 29 | Reflected XSS in Hubshare via Open Redirect |
| CVE-2024-6881 | HU Hubshare M-Files Corporation | 5.4 | Jul 29 | Stored XSS Vulnerability |
| CVE-2024-5142 | HU Hubshare M-Files Corporation | 5.4 | May 24 | XSS in Hubshare's social module |
| CVE-2024-4056 | MS M-Files Server M-Files Corporation | 7.5 | Apr 26 | Denial of service condition in M-Files Server |
| CVE-2023-4479 | MW M-Files Web M-Files Corporation | 5.4 | Mar 4 | Stored XSS Vulnerability in M-Files Web |
| CVE-2024-0563 | MS M-Files Server M-Files Corporation | 6.5 | Feb 23 | Denial of service condition in M-Files Server |
| CVE-2023-6910 | MS M-Files Server M-Files Corporation | 6.5 | Dec 20 | Uncontrolled Resource Consumption in M-Files Server |
| CVE-2023-6912 | MS M-Files Server M-Files Corporation | 9.8 | Dec 20 | Brute force vulnerability in M-Files user authentication |