What is CVE-2025-46296?

CVE-2025-46296 is a medium-severity vulnerability in Claris Filemaker Server, classified under Improper Authorization. CVSS score: 5.4/10. Published 2025-12-16.

How severe is CVE-2025-46296?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in Claris Filemaker Server

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerabil…

EPSS: 0.001 (3.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Claris Filemaker Server — versions unspecified
Claris Filemaker_server

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

product-security@apple.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-46296?: CVE-2025-46296 is a medium-severity vulnerability in Claris Filemaker Server, classified under Improper Authorization. CVSS score: 5.4/10. Published 2025-12-16.
How severe is CVE-2025-46296?: Medium severity. CVSS v3 base score is 5.4 out of 10.