Read the docs

M-Files Corporation

Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

M-Files Corporation records in CISA KEV

No M-Files Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M-files Server 34 records MEDIUM Hubshare 9 records LOW M-files 4 records LOW M-files Web 4 records HIGH Classic Web 3 records LOW Web Companion 2 records LOW M-files Client 1 record LOW M-files Mobile 1 record LOW

Records

4 records in M-files Web · all components

TI-2021-18438 CVE-2021-41807 · GHSA-5c8j-7c6c-838x

Missing brute-force protection in M-Files Server

Priority MEDIUM 44

Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts ea…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01106 Published 2022-01-18 Fixed in 21.12.10873.0 CWE-307
TI-2025-02697 CVE-2025-3087 · GHSA-hjj2-4jq5-9f5q

Stored XSS Vulnerability in M-Files Web

Priority LOW 23

Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00279 Published 2025-04-04 Fixed in 25.2.14524.4 CWE-79
Open these records in search →