Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

M-Files Server — Vulnerabilities & Security Advisories 35

All 35 CVE vulnerabilities found in M-Files Server, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities for M-Files Server, developed by Infomaniak, focusing specifically on logic errors and input validation flaws associated with this product. It collects a comprehensive set of historical security advisories, covering reported weaknesses spanning from the early 2000s through recent releases. Readers can use this resource to track the vendor’s advisory history, understand the specific weakness class of improper input handling, and review the complete vulnerability timeline for the product. The content is organized to facilitate analysis of recurring issues and the evolution of the software’s security posture over time, providing a clear view of which components required patches for specific defect types. This collection serves as a reference for security teams evaluating the risk profile of M-Files Server deployments, allowing them to identify patterns in past incidents without manually searching individual bug trackers or vendor bulletins.

Vendor: M-Files

CVE ID Title CVSS Severity Published
CVE-2026-0931 Denial-of-service vulnerability in M-Files Server CWE-1286 6.9 Medium 2026-08-05
CVE-2026-0983 Denial of service vulnerability in M-Files Server CWE-1286 - - 2026-05-18
CVE-2026-0932 M-Files Server 安全漏洞 CWE-918 8.2AI High AI 2026-04-01
CVE-2026-0663 Denial of Service condition in M-Files Server CWE-1286 4.9AI Medium AI 2026-01-21
CVE-2025-13008 Session Token Disclosure in M-Files Web CWE-359 6.5AI Medium AI 2025-12-19
CVE-2025-14267 Unintended temporary cached data included in a structure only copy intended to be empty of data CWE-212 6.5AI Medium AI 2025-12-19
CVE-2025-14318 Improper access validation in M-Files Server CWE-863 6.5AI Medium AI 2025-12-18
CVE-2025-11681 Denial of Service condition in M-Files Server CWE-400 6.5AI Medium AI 2025-11-17
CVE-2025-5964 Path traversal in M-Files API CWE-22 6.5AI Medium AI 2025-06-15
CVE-2025-3086 User in anonymous role could create and delete views CWE-653 7.1AI High AI 2025-04-04
CVE-2025-0635 Denial of Service condition in M-Files Server CWE-770 7.5 - 2025-01-23
CVE-2025-0619 Unsafe stored password recovery CWE-522 4.9 - 2025-01-23
CVE-2025-0648 M-Files Server crash via EOT database driver configuration CWE-248 4.9 - 2025-01-23
CVE-2024-10126 Local file inclusion vulnerability in M-Files Server CWE-552 4.3AI Medium AI 2024-11-20
CVE-2024-10127 Support for authentication bypass condition in M-Files LDAP authentication CWE-303 8.1AI High AI 2024-11-20
CVE-2024-6789 Path traversal in M-Files API CWE-22 6.5AI Medium AI 2024-08-27
CVE-2024-4056 Denial of service condition in M-Files Server CWE-1333 7.5 High 2024-04-26
CVE-2024-0563 Denial of service condition in M-Files Server CWE-770 4.3 Medium 2024-02-23
CVE-2023-6910 Uncontrolled Resource Consumption in M-Files Server CWE-770 6.5 Medium 2023-12-20
CVE-2023-6912 Brute force vulnerability in M-Files user authentication CWE-307 7.5 High 2023-12-20
CVE-2023-6239 Incorrect calculation of effective permissions CWE-281 5.4 Medium 2023-11-28
CVE-2023-6189 Improper Permission Handling in M-Files Server CWE-280 4.3 Medium 2023-11-22
CVE-2023-6117 M-Files REST API allows Denial of Service CWE-770 5.7 Medium 2023-11-22
CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read CWE-125 6.5 Medium 2023-08-25
CVE-2023-3405 Denial of service condition in M-Files Server CWE-248 7.5 High 2023-06-27
CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server CWE-400 6.5 Medium 2023-04-20
CVE-2023-0383 Uncontrolled Resource Consuption in M-Files Server CWE-770 7.5 High 2023-04-20
CVE-2023-0382 Uncontrolled Resource Consumption in M-Files Server CWE-770 6.5 Medium 2023-04-05
CVE-2022-4858 Insertion of Sensitive Information into Log File CWE-532 4.4 Medium 2022-12-30
CVE-2022-1911 Information disclosure in M-Files Server CWE-200 5.3 Medium 2022-11-30

All 35 known CVE vulnerabilities affecting M-Files Server with full Chinese analysis, references, and POCs where available.