VULNERABILITY INTELLIGENCE
CVE-2025-2159
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-04-04
Last modified2026-06-17
Description
Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local user to run scripts via UI
Weakness classification
- security@m-files.com: CWE-79