VULNERABILITY INTELLIGENCE

CVE-2025-2159

EPSS probability0.23%
CISA KEVNot currently listed
Published2025-04-04
Last modified2026-06-17

Description

Stored XSS in Desktop UI in M-Files Server Admin tool before version 25.3.14681.7 on Windows allows authenticated local user to run scripts via UI

Weakness classification

  • security@m-files.com: CWE-79

Primary references