CVE-2025-0635 MEDIUM

CVE-2025-0635: Denial of Service condition in M-Files Server

Vendor M-Files Corporation
Product M-Files Server
Weakness CWE-770 · Uncontrolled resource consumption
Published January 23, 2025
Last update February 23, 2026
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resources in certain conditions.

Key dates

02Disclosure timeline

January 23, 2025 CVE published
February 23, 2026 Record updated