CVE-2022-38339

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page...

CVE-2022-38341

Safe Software FME Server v2021.2.5 and below does not employ server-side validation...

CVE-2022-38341

Safe Software FME Server v2021.2.5 and below does not employ server-side validation...

Input validation

Safe Software FME Server v2021.2.5 and below does not employ server-side validation...

PT-2022-24379 · Safe · Fme Server

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions v2022.0.1.1 and below Safe Software FME Server version v2021.2.5 and below Description: The issue is related to the lack of server-side validation in Safe Software FME Server. Recommendations: For versions...

CVE-2022-38342

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity XXE vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery SSRF attacks...