M-Files Online is a document management system that helps organize, manage and track information and documents. It offers features such as version control, document workflows, mobile access, e-signature capabilities, and robust search tools. It's designed to improve collaboration, productivity, and ensure compliance across an organization.

M-Files Online

M-Files Desktop is a document management system that helps users to organize, manage and track documents and information. The system can be installed on a PC for single-user operation and utilizes metadata in organizing files for quick retrieval. Beyond storage, M-Files Desktop provides features such as access control, workflow, check in/check out, version control, and notifications.

M-Files Desktop

Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2023-4479	MEDIUM	5.4	M-Files Online	cpe:2.3:a:m-files:m-files	No	Yes	Mar 04, 2024
CVE-2023-2325	MEDIUM	5.4	M-Files Online	cpe:2.3:a:m-files:classic_web	No	Yes	Oct 20, 2023
CVE-2026-18371	MEDIUM	5.1	M-Files Online	cpe:2.3:a:m-files:m-files_web	No	Yes	Aug 19, 2026
CVE-2025-3087	MEDIUM	5.1	M-Files Online	cpe:2.3:a:m-files:m-files_web	No	Yes	Apr 04, 2025
CVE-2026-18372	MEDIUM	4.8	M-Files Online	cpe:2.3:a:m-files:m-files_web	No	Yes	Aug 19, 2026

CVE-2025-3087:
M-Files Online vulnerability analysis and mitigation

5.1

Related M-Files Online vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-3087: M-Files Online vulnerability analysis and mitigation