Vulnerabilities in M-Files Corporation
33 resultsCVE-2026-18371MEDIUMHTML injection in M-Files WebEPSS 0.4%CVE-2025-14267MEDIUMUnintended temporary cached data included in a structure only copy intended to be empty of dataEPSS 0.4%CVE-2024-6881HIGHStored XSS VulnerabilityEPSS 0.3%CVE-2025-14318MEDIUMImproper access validation in M-Files ServerEPSS 0.3%CVE-2024-5142HIGHXSS in Hubshare's social moduleEPSS 0.3%CVE-2024-6124HIGHReflected XSS in Hubshare via Open RedirectEPSS 0.3%CVE-2024-9174MEDIUMStored HTML Injection in Hubshare social moduleEPSS 0.3%CVE-2025-3087MEDIUMStored XSS Vulnerability in M-Files WebEPSS 0.3%CVE-2025-2091MEDIUMOpen redirection in M-Files MobileEPSS 0.3%CVE-2025-9826HIGHStored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution fEPSS 0.3%CVE-2025-2159MEDIUMStored XSS in M-Files Admin user interfaceEPSS 0.2%CVE-2026-0983HIGHDenial of service vulnerability in M-Files ServerEPSS 0.2%CVE-2026-0932MEDIUMBlind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server befoEPSS 0.2%