← Database

CVE-2025-46296

MEDIUM CVSS: 5.4 Published: 2025-12-16 Modified: 2026-06-17

Description

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4.

Affected Platforms

Claris Filemaker Server

Weakness Type

CWE-285

References