Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Claris FileMaker Server 22.0.4 Clear all filters
TI-2025-29048 CVE-2025-46296 · GHSA-53gg-7r73-4vf2

Improper authorization in Claris FileMaker Server

Priority LOW 24

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application lo…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00169 Published 2025-12-16 Fixed in 22.0.4 CWE-285
TI-2025-29047 CVE-2025-46295 · GHSA-9gm8-6rq9-qj6f

Code injection in Claris FileMaker Server

Priority MEDIUM 51

Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01044 Published 2025-12-16 Fixed in 22.0.4 CWE-94
TI-2025-29046 CVE-2025-46294 · GHSA-2jrm-5c9c-9px7

Information disclosure in Claris FileMaker Server

Priority LOW 30

To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCreation in the Windows registry.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00234 Published 2025-12-16 Fixed in 22.0.4 CWE-200