5.6
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Description
Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows data leak exposure affecting versions before 25.12.15491.7
Basic Information
ID
CVE-2025-14267
Source
M-Files Corporation
Published
Dec 19, 2025 at 06:15
Affected Product
Vendor
M-Files Corporation
Product
M-Files Server
Affected Versions
M-Files Corporation M-Files Server 0