M-Files Corporation M-Files Web
4 CVEs affecting M-Files Corporation M-Files Web. Latest disclosed: 2026-08-19. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4479 | High | 7.3 | 2024-03-04 | Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time pe… |
CVE-2025-3087 | Medium | 5.4 | 2025-04-04 | Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts |
CVE-2026-18372 | | 2026-08-19 | CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user inte… | |
CVE-2026-18371 | | 2026-08-19 | HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users. |