ByteOS Network

NVD Vulnerability Details :

CVE-2025-14267

Modified

Source-security@m-files.com

Published At-19 Dec, 2025 | 07:16

Updated At-23 Feb, 2026 | 11:16

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows data leak exposure affecting versions before 25.12.15491.7

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.6	MEDIUM	CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 4.0

Base score: 5.6

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 4.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CPE Matches

M-Files Oy

>>m-files_server>>Versions before 25.12.15491.7(exclusive)

cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-212	Secondary	security@m-files.com

CWE ID: CWE-212

Type: Secondary

Source: security@m-files.com

References

Hyperlink	Source	Resource
https://empower.m-files.com/security-advisories/CVE-2025-14267	security@m-files.com	N/A
https://product.m-files.com/security-advisories/cve-2025-14267/	security@m-files.com	Vendor Advisory

Hyperlink: https://empower.m-files.com/security-advisories/CVE-2025-14267

Source: security@m-files.com

Resource: N/A

Hyperlink: https://product.m-files.com/security-advisories/cve-2025-14267/

Source: security@m-files.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History