claris filemaker server

Name: claris filemaker server
Brand: claris

productUS

cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical1high4medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-46295US	—	1.04% (64th)	Exploit	22.0.4	2025-12-16	< 22.0.4
CVE-2021-44147US	medium5.5	1.17% (67th)	—	19.4.1	2021-11-22	< 19.4.1
CVE-2026-43752US	—	0.49% (42nd)	—	26.0.1	2026-07-09	< 26.0.1
CVE-2024-27790US	high7.5	0.46% (40th)	—	20.3.2	2024-05-14	< 20.3.2
CVE-2023-42955US	medium4.9	0.45% (39th)	—	20.3.1	2024-05-14	< 20.3.1
CVE-2023-42954US	medium4.9	0.45% (39th)	—	20.3.1	2024-03-21	< 20.3.1
CVE-2026-86934US	—	0.32% (24th)	—	26.0.3	2026-09-23	< 26.0.3
CVE-2024-27794US	medium6.1	0.31% (24th)	—	20.3.2	2024-04-15	< 20.3.2
CVE-2026-86930US	critical9.1	0.29% (22nd)	—	26.0.3	2026-09-23	< 26.0.3
CVE-2025-46320US	—	0.26% (17th)	—	22.0.4	2026-02-24	2 versions
CVE-2025-46294US	—	0.23% (14th)	—	22.0.4	2025-12-16	< 22.0.4
CVE-2025-46296US	—	0.17% (6th)	—	22.0.4	2025-12-16	< 22.0.4
CVE-2026-86926US	—	0.13% (2nd)	—	26.0.3	2026-09-23	< 26.0.3

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-257Storing Passwords in a Recoverable Format1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.