Skip to content
OpenAdvisories

Product · M-Files

M-Files Web

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-18372

    CSS injection in M-Files Web

    CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.

    M-Files M-Files Web
  • Medium 5.1
    CVE-2026-18371

    HTML injection in M-Files Web

    HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.

    M-Files M-Files Web
  • Medium 5.1
    CVE-2025-3087

    Stored XSS Vulnerability in M-Files Web

    Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

    M-Files M-Files Web
  • Medium 6.5
    CVE-2022-4264

    Incorrect privilege assignment in M-Files Web Server

    Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration.

    M-Files M-Files Web