Claris

14 CVEs across 8 Claris products. Browse Claris vulnerabilities, severities, and proof-of-concept exploits.

Claris products with known CVEs

ProductCVEs
Filemaker Server10
Filemaker Server9
Filemaker Pro3
Claris Pro2
Filemaker Cloud2
Filemaker Cloud2
Filemaker Pro1
Filemaker Pro Advanced1
Claris CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-43752Medium4.92026-07-09An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM set…
CVE-2026-43685High7.22026-05-12A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands thro…
CVE-2026-43680High7.22026-05-12A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script sch…
CVE-2025-46320Medium6.12026-02-24A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerabi…
CVE-2025-46296Medium5.42025-12-16An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features s…
CVE-2025-46295Critical9.82025-12-16Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substi…
CVE-2025-46294Medium5.32025-12-16To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCrea…
CVE-2024-27790High7.52024-05-14Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue ha…
CVE-2023-42955Medium4.92024-05-14Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console…
CVE-2024-27794Medium6.12024-04-15Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the F…
CVE-2023-42954Medium4.92024-03-21A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websites when signed in to the Admin Console…
CVE-2023-42920High7.82024-03-19Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.
CVE-2021-44147Medium5.52021-11-22An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a craf…
CVE-2014-8347High7.82020-02-11An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which…