← Database

CVE-2025-46320

MEDIUM CVSS: 6.1 Published: 2026-02-24 Modified: 2026-06-17

Description

A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7.

Affected Platforms

Claris Filemaker Server

Weakness Type

CWE-79

References