Claris FileMaker Server vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20253
3. 20265

Newest CVEs

• CVE-2026-86934

  An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the…

  Claris · FileMaker Server

  Critical9.1
• CVE-2026-86926

  A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause…

  Claris · FileMaker Server

  High7.8
• CVE-2026-86930

  An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose…

  Claris · FileMaker Server

  Critical9.1
• CVE-2026-43752

  An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM…

  Claris · FileMaker Server

  Medium4.9
• CVE-2025-46320

  A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This…

  Claris · FileMaker Server

  Medium6.1
• CVE-2025-46296

  An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features…

  Claris · FileMaker Server

  Medium5.4
• CVE-2025-46295

  Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the…

  Claris · FileMaker Server

  Critical9.8
• CVE-2025-46294

  To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting…

  Claris · FileMaker Server

  Medium5.3
• CVE-2024-27790

  Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue…

  Claris · FileMaker Server

  High7.5
• CVE-2023-42955

  Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console…

  Claris · FileMaker Server

  Medium6.1