PT-2014-6405

Name of the Vulnerable Software and Affected Versions FileMaker Pro versions prior to 13 FileMaker Pro Advanced versions prior to 13 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as it does not verify X.509...

CVE-2014-5321: Undefined Security Weakness

FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-23...

PT-2013-4533

Name of the Vulnerable Software and Affected Versions FileMaker Pro versions prior to 12 FileMaker Pro Advanced versions prior to 12 Description A cross-site scripting XSS issue exists in the Instant Web Publish function, allowing remote attackers to inject arbitrary web script or HTML. This can ...

CVE-2013-2319: Undefined Security Weakness

FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...