Login Request a demo
MS
Product
M-Files Server
by M-Files · last CVE Apr 1, 2026
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 3High 13Medium 17Low 2
Severity
All severities35Critical3High13Medium17Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add M-Files Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6239
8.8
1%
Nov 28
Incorrect calculation of effective permissions
Affected: 23.9; 23.10; 23.11 before 23.11.13168.7
CVE-2023-2112
7.8
0%
Apr 20
Desktop component allows lateral movement between sessions
Affected: before 23.4.12455.0
CVE-2022-4862
7.6
0%
Mar 6
XSS vulnerability in M-Files Web
Affected: before 22.12.12140.3
CVE-2025-0635
7.5
1%
Jan 23
Denial of Service condition in M-Files Server
Affected: before 25.1.14445.5
CVE-2024-4056
7.5
1%
Apr 26
Denial of service condition in M-Files Server
Affected: 23.11.13168.6 before 24.4.13592
CVE-2023-6117
7.5
1%
Nov 22
M-Files REST API allows Denial of Service
Affected: before 23.11.13156.0
CVE-2023-3405
7.5
1%
Jun 27
Denial of service condition in M-Files Server
Affected: before 23.6.12695.3
CVE-2023-0384
7.5
1%
Apr 20
Uncontrolled Resource Consuption in M-Files Server
Affected: before 23.4.12528.1
CVE-2023-0383
7.5
1%
Apr 20
Uncontrolled Resource Consuption in M-Files Server
Affected: before 23.4.12528.1
CVE-2022-3284
7.5
1%
Mar 6
Insecure way of passing a download key
Affected: before 22.11.12011.0
CVE-2022-4858
7.5
0%
Dec 30
Insertion of Sensitive Information into Log File
Affected: before 22.10.11846.0
CVE-2026-0932
7.3
0%
Apr 1
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated…
Affected: before 26.3.15818.5
CVE-2025-3086
7.1
0%
Apr 4
User in anonymous role could create and delete views
Affected: before 25.3.14549
Showing 13