https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-35801.htmlhttps://patchthecve.com/cve/CVE-2023-35801.htmlWed, 17 Jun 2026 06:05:14 +0000HIGH 8.1: A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have access https://patchthecve.com/cve/CVE-2022-38340.htmlhttps://patchthecve.com/cve/CVE-2022-38340.htmlWed, 17 Jun 2026 04:56:26 +0000CRITICAL 9.1: Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload.https://patchthecve.com/cve/CVE-2022-38339.htmlhttps://patchthecve.com/cve/CVE-2022-38339.htmlWed, 17 Jun 2026 04:56:26 +0000CRITICAL 9.6: Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.https://patchthecve.com/cve/CVE-2022-38341.htmlhttps://patchthecve.com/cve/CVE-2022-38341.htmlWed, 17 Jun 2026 04:56:27 +0000HIGH 7.1: Safe Software FME Server v2021.2.5 and below does not employ server-side validation.https://patchthecve.com/cve/CVE-2022-38342.htmlhttps://patchthecve.com/cve/CVE-2022-38342.htmlWed, 17 Jun 2026 04:56:27 +0000HIGH 8.5: Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.