Skip to content
Noroxi

Claris records

18 published records for vendor claris.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2025-46295
    39Monitor

    Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input i

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    claris · filemaker serverDec 16, 2025

  • CVE-2026-86934
    36Monitor

    An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header

    CriticalCVSS 9.1No exploitEPSS 0%

    claris · filemaker serverSep 23, 2026

  • CVE-2026-86930
    36Monitor

    An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a containe

    CriticalCVSS 9.1No exploitEPSS 0%

    claris · filemaker serverSep 23, 2026

  • CVE-2014-8347
    31Monitor

    An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Adv

    HighCVSS 7.8Proof of conceptEPSS 1%

    claris · filemaker proFeb 11, 2020

  • CVE-2023-42920
    31Monitor

    Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS.

    HighCVSS 7.8No exploitEPSS 0%

    claris · claris proMar 19, 2024

  • CVE-2026-86926
    31Monitor

    A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 data

    HighCVSS 7.8No exploitEPSS 0%

    claris · filemaker serverSep 23, 2026

  • CVE-2024-27790
    30Monitor

    Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Se

    HighCVSS 7.5No exploitEPSS 0%

    claris · filemaker serverMay 14, 2024

  • CVE-2026-86938
    29Monitor

    A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated admini

    HighCVSS 7.3No exploitEPSS 0%

    claris · filemaker proSep 23, 2026

  • CVE-2026-43680
    28Monitor

    A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restricti

    HighCVSS 7.2No exploitEPSS 0%

    claris · filemaker cloudMay 12, 2026

  • CVE-2026-43685
    28Monitor

    A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating s

    HighCVSS 7.2No exploitEPSS 0%

    claris · filemaker cloudMay 12, 2026

  • CVE-2024-27794
    24Monitor

    Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled

    MediumCVSS 6.1No exploitEPSS 0%

    claris · filemaker serverApr 15, 2024

  • CVE-2025-46320
    24Monitor

    A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execut

    MediumCVSS 6.1No exploitEPSS 0%

    claris · filemaker serverFeb 24, 2026

  • CVE-2021-44147
    22Monitor

    An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose loc

    MediumCVSS 5.5No exploitEPSS 1%

    claris · filemaker proNov 22, 2021

  • CVE-2025-46294
    21Monitor

    To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsD

    MediumCVSS 5.3No exploitEPSS 0%

    claris · filemaker serverDec 16, 2025

  • CVE-2025-46296
    21Monitor

    An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access admini

    MediumCVSS 5.4No exploitEPSS 0%

    claris · filemaker serverDec 16, 2025

  • CVE-2026-43752
    19Monitor

    An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the

    MediumCVSS 4.9No exploitEPSS 0%

    claris · filemaker serverJul 9, 2026

  • CVE-2023-42955
    19Monitor

    Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to

    MediumCVSS 4.9No exploitEPSS 0%

    claris · filemaker serverMay 14, 2024

  • CVE-2023-42954
    19Monitor

    A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websites when signed in to

    MediumCVSS 4.9No exploitEPSS 0%

    claris · claris proMar 21, 2024