MS
Product
M-Files Server
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 13Low 0
Watch
Add M-Files Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0931 | 6.9 | Aug 5 | Denial-of-service vulnerability in M-Files Server Affected: before 26.5.16015.3 |
| CVE-2025-11681 | 6.5 | Nov 17 | Denial of Service condition in M-Files Server Affected: before 25.11.15392.1 |
| CVE-2025-5964 | 6.5 | Jun 15 | Path traversal in M-Files API Affected: before 25.6.14925.0 |
| CVE-2024-6789 | 6.5 | Aug 27 | Path traversal in M-Files API Affected: before 24.8.13981.0; LTS 24.2.0 before LTS 24.2.13421.15 SR2; LTS 23.8.0 before LTS 23.8.12892.0 SR6 |
| CVE-2024-0563 | 6.5 | Feb 23 | Denial of service condition in M-Files Server Affected: before 24.2 |
| CVE-2023-6910 | 6.5 | Dec 20 | Uncontrolled Resource Consumption in M-Files Server Affected: before 23.12.13195.0 |
| CVE-2026-0663 | 4.9 | Jan 21 | Denial of Service condition in M-Files Server Affected: before 26.1.15632.3 |
| CVE-2025-14267 | 4.9 | Dec 19 | Unintended temporary cached data included in a structure only copy intended to be empty of data Affected: before 25.12.15491.7 |
| CVE-2025-0619 | 4.9 | Jan 23 | Unsafe stored password recovery Affected: before 25.1.14445.5 |
| CVE-2025-0648 | 4.9 | Jan 23 | M-Files Server crash via EOT database driver configuration Affected: before 25.1.14445.5 |
| CVE-2021-41810 | 4.8 | May 2 | Script injection in M-Files Admin Affected: M-Files Server before 22.2.11051.0 |
| CVE-2025-14318 | 4.3 | Dec 18 | Improper access validation in M-Files Server Affected: before 25.12.15491.7 |
| CVE-2024-10126 | 4.3 | Nov 20 | Local file inclusion vulnerability in M-Files Server Affected: before 24.11 |
Showing 13
