CVE-2025-46320 — Claris / FileMaker Server

CVE-2025-46320

Claris / FileMaker Server PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7.

Affected (CNA)

Vendor / product	Versions
Claris / FileMaker Server	affected unspecified before 22.0.4
Claris / FileMaker Server	affected unspecified before 21.1.7

CWE

No CWE identifiers supplied.

References

https://support.claris.com/s/answerview?anum=000049123&language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.