Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: M-Files Server 25.1.14445.5 Clear all filters
TI-2025-00535 CVE-2025-0635 · GHSA-74h7-xgm8-8m8h

Denial of Service condition in M-Files Server

Priority LOW 29

Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resources in certain conditions.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00552 Published 2025-01-23 Fixed in 25.1.14445.5 CWE-770
TI-2025-00521 CVE-2025-0619 · GHSA-hqvw-49x7-pm7w

Unsafe stored password recovery

Priority LOW 22

Unsafe password recovery from configuration in M-Files Server before 25.1 allows a highly privileged user to recover external connector passwords

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00426 Published 2025-01-23 Fixed in 25.1.14445.5 CWE-522
TI-2025-00545 CVE-2025-0648 · GHSA-3gmg-r977-hqcc

M-Files Server crash via EOT database driver configuration

Priority LOW 27

Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 and before 24.8 LTS SR3 allows a highly privileged attacker to cause denial of service via configuration change.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00535 Published 2025-01-23 Fixed in 25.1.14445.5, 24.8.13981.14 CWE-248