PT-2026-21797 · Clarisa · Filemaker Server+1

CVE-2025-46320 · Publicado 2026-02-24 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FileMaker versions prior to 22.0.4 FileMaker versions prior to 21.1.7

Description A cross-site scripting (XSS) issue exists in FileMaker WebDirect custom homepages. Successful exploitation of this issue could allow for unauthorized access and remote code execution.

Recommendations Update to FileMaker Server 22.0.4 or later. Update to FileMaker Server 21.1.7 or later.

Correção

RCE

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-46320

Produtos afetados

Filemaker

Filemaker Server

Referências · 6

• https://twitter.com/VulmonFeeds/status/2026473826939252869 · Publicação no Twitter
• https://t.me/CVEtracker/45656 · Publicação no Telegram
• https://support.claris.com/s/answerview?anum=000049123&language=en_US · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46320 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-46320 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2026676424669802574 · Publicação no Twitter