m-files m-files server

Name: m-files m-files server
Brand: m-files

productUS

cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical12high16medium2low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-5964US	medium6.5	13.0% (96th)	Exploit	25.6.14925.0	2025-06-15	3 versions
CVE-2021-41807US	critical9.8	1.11% (66th)	—	21.12.10873.0	2022-01-18	< 21.12.10873.0
CVE-2023-6912US	critical9.8	0.97% (62nd)	—	23.12.13205.0	2023-12-20	< 23.12.13205.0
CVE-2023-6910US	medium6.5	0.91% (60th)	—	23.12.13195.0	2023-12-20	< 23.12.13195.0
CVE-2023-3405US	high7.5	0.84% (58th)	—	23.6.12695.3	2023-06-27	< 23.6.12695.3
CVE-2023-0383US	high7.5	0.84% (58th)	—	23.4.12528.1	2023-04-20	< 23.4.12528.1
CVE-2023-0384US	high7.5	0.80% (56th)	—	23.4.12528.1	2023-04-20	< 23.4.12528.1
CVE-2023-0382US	medium6.5	0.79% (56th)	—	23.4.12528.1	2023-04-05	< 23.4.12528.1
CVE-2024-4056US	—	0.77% (55th)	—	24.4.13592	2024-04-26	23.11.13168.6 → 24.4.13592
CVE-2023-6117US	high7.5	0.71% (53rd)	—	no fix	2023-11-22	≤ 23.11.13156.0
CVE-2024-0563US	medium6.5	0.70% (53rd)	—	24.2.13421.8	2024-02-23	4 versions
CVE-2022-3284US	high7.5	0.67% (52nd)	—	22.11.12011.0	2023-03-06	< 22.11.12011.0
CVE-2022-1911US	medium5.3	0.62% (49th)	—	22.6.11534.4	2022-11-30	< 22.6.11534.4
CVE-2024-10127US	critical9.8	0.61% (49th)	—	24.11	2024-11-20	2 versions
CVE-2023-6239US	high8.8	0.57% (47th)	—	23.11.13168.7	2023-11-28	3 versions
CVE-2021-41809US	medium4.3	0.56% (46th)	—	22.1.11017.1	2022-01-18	< 22.1.11017.1
CVE-2024-6789US	medium6.5	0.56% (46th)	—	24.2.13421.15	2024-08-27	2 versions
CVE-2022-4270US	low2.6	0.55% (46th)	—	22.5.11436.1	2022-12-02	< 22.5.11436.1
CVE-2025-0635US	high7.5	0.53% (45th)	—	25.1.14445.5	2025-01-23	< 25.1.14445.5
CVE-2025-0648US	medium4.9	0.51% (44th)	—	24.8.13981.14	2025-01-23	2 versions
CVE-2023-6189US	medium5.3	0.51% (43rd)	—	23.11.13156.0	2023-11-22	< 23.11.13156.0
CVE-2022-1606US	medium4.3	0.48% (42nd)	—	22.3.11237.3	2022-11-30	< 22.3.11237.3
CVE-2022-4858US	high7.5	0.48% (41st)	—	22.10.11846.0	2022-12-30	< 22.10.11846.0
CVE-2025-3086US	high7.1	0.42% (36th)	—	25.3.14549	2025-04-04	< 25.3.14549
CVE-2025-0619US	medium4.9	0.42% (36th)	—	25.1.14445.5	2025-01-23	< 25.1.14445.5
CVE-2025-11681US	medium6.5	0.41% (35th)	—	25.11.15392.1	2025-11-17	3 versions
CVE-2026-0663US	medium4.9	0.41% (35th)	—	26.1.15632.3	2026-01-21	< 26.1.15632.3
CVE-2024-10126US	medium4.3	0.39% (32nd)	—	23.8.12892.6	2024-11-20	4 versions
CVE-2025-14267US	medium4.9	0.38% (32nd)	—	25.12.15491.7	2025-12-19	< 25.12.15491.7
CVE-2022-4862US	high7.6	0.36% (29th)	—	22.12.12140.3	2023-03-06	< 22.12.12140.3
CVE-2025-14318US	medium4.3OT elevated	0.31% (23rd)	—	25.12.15491.7	2025-12-18	< 25.12.15491.7
CVE-2021-41808US	low2.3	0.25% (16th)	—	21.11.10775.0	2022-01-18	< 21.11.10775.0
CVE-2026-0932US	high7.3	0.19% (9th)	—	26.3.15818.5	2026-04-01	< 26.3.15818.5
CVE-2023-2112US	high7.8	0.18% (7th)	—	23.4.12455.0	2023-04-20	< 23.4.12455.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-248Uncaught Exception2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan