Safe Fme Server
8 CVEs affecting Safe Fme Server. Latest disclosed: 2023-06-23. Critical: 2, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38339 | Critical | 9.6 | 2022-09-19 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web s… |
CVE-2022-38340 | Critical | 9.1 | 2022-09-20 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload. |
CVE-2018-20402 | High | 8.8 | 2018-12-23 | Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the th… |
CVE-2022-38342 | High | 8.5 | 2022-09-13 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attack… |
CVE-2023-35801 | High | 8.1 | 2023-06-23 | A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource c… |
CVE-2022-38341 | High | 7.1 | 2022-09-19 | Safe Software FME Server v2021.2.5 and below does not employ server-side validation. |
CVE-2020-22789 | Medium | 6.1 | 2021-04-28 | Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or… |
CVE-2020-22790 | Medium | 5.4 | 2021-04-28 | Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via mo… |