PatchTheCVEfilemaker vulnerabilities
Recent CVEs affecting filemaker products. 5 tracked.
filemaker has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2016-05-14. Highest priority: CVE-2016-1208 (score 49/100).
- CVE-2016-1208 HIGH 7.5 MITIGATE UPGRADE The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspec
- CVE-2014-5322 MEDIUM 4.3 UPGRADE UPGRADE Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pr
- CVE-2014-5321 MEDIUM 5.8 UPGRADE UPGRADE FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which
- CVE-2013-3640 MEDIUM 4.3 UPGRADE UPGRADE Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pr
- CVE-2013-2319 MEDIUM 5.8 UPGRADE UPGRADE FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which
FAQ
How do I fix filemaker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is filemaker being exploited right now?
None of the tracked filemaker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which filemaker CVE should I patch first?
CVE-2016-1208 currently ranks highest (49/100): The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspec.