Login Request a demo
MW
Product
M-Files Web
by M-Files · last CVE Apr 4, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add M-Files Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-41807
9.8
1%
Jan 18
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and…
Affected: before 21.12.10873.0
CVE-2021-37253
7.5
3%
Dec 5
M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers)
Affected: before 20.10.9524.1
CVE-2021-37254
7.5
1%
Oct 28
In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key…
Affected: before 20.10.9445.0; 20.10.9500.0 before 20.10.9534.1
CVE-2023-3406
6.5
1%
Aug 25
Path traversal issue in M-Files Classic Web
Affected: before 23.6.12695.3
CVE-2025-3087
5.4
0%
Apr 4
Stored XSS Vulnerability in M-Files Web
Affected: 25.1.14445.5 through 25.2.14524.4
CVE-2023-2325
5.4
1%
Oct 20
Stored XSS Vulnerability in M-Files Classic Web
Affected: before 23.10
CVE-2022-4264
4.3
1%
Dec 9
Incorrect privilege assignment in M-Files Web Server
Affected: before 22.8.11691.0
CVE-2022-4270
2.6
1%
Dec 2
Incorrect privilege assignment in M-Files Web Server
Affected: before 22.5.11436.1
Showing 8