m-files m-files web

Name: m-files m-files web
Brand: m-files

productUS

cpe:2.3:a:m-files:m-files_web:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical2high1medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-37253US	high7.5	2.93% (87th)	—	20.10.9524.1	2021-12-05	< 20.10.9524.1
CVE-2021-37254US	high7.5	1.34% (71st)	—	20.10.9534.1	2021-10-28	2 versions
CVE-2021-41807US	critical9.8	1.11% (66th)	—	21.12.10873.0	2022-01-18	< 21.12.10873.0
CVE-2025-3087US	medium5.4	0.28% (20th)	—	no fix	2025-04-04	25.1.14445.5 → 25.2.14524.4

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.