HighCVSS 7.5
The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors.
Product
filemaker vulnerabilities
5 published CVES affecting filemaker, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest filemaker CVEs
Newest publication first
-
-
MediumCVSS 4.3
Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
HighCVSS 7.5 EPSS 1.4%
FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
-
MediumCVSS 5.0 EPSS 1.6%
FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
-
HighCVSS 7.5 EPSS 2.1%
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.