CVE-2014-5321

Summary: CVE-2014-5321 affects FileMaker Pro before 13 and Pro Advanced before 13, which fail to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive data. This vulnerability is noted as a consequence of an incorrect fix for CVE-2013-2319. Affe...

CVE-2014-5322

Cross-site scripting XSS vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640...

FileMaker Pro fails to verify SSL server certificates

Overview FileMaker Pro contains a function to encrypt communications with the FileMaker Server. FileMaker Pro fails to verify the SSL server certificate. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-2319. Impact A man-in-the-minddle attack may allow an attacker to...

FileMaker Pro vulnerable to cross-site scripting

Overview FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-3640. Impact An arbitrary script may be executed on the user's web browser...

San Diego State Warns of Possible Data Breach

San Diego State University has notified some of its current and former enrollees that some of their personal information may have been accessed by unauthorized users, after a database containing the information was found to be accessible by anyone on the affected department’s wired network. The...

CVE-2013-3640

Cross-site scripting XSS vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2319

FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-3640

Cross-site scripting XSS vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3640

CVE-2013-3640 is an XSS vulnerability in FileMaker Pro’s Instant Web Publishing, affecting FileMaker Pro (before 12) and Pro Advanced (before 12). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Some connected sources note that subsequent advisori...

CVE-2013-2319

CVE-2013-2319 affects FileMaker Pro before 12 and Pro Advanced before 12, where SSL certificates from servers are not verified, enabling MITM disclosure of sensitive information via crafted certificates. The issue is tied to an incomplete fix for CVE-2013-2319 and has been acknowledged across mul...

CVE-2013-2319

FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

KLA10156 Multiple vulnerabilities in FileMaker

Multiple serious vulnerabilities have been found in FileMaker. Malicious users can exploit these vulnerabilities to obtain sensitive information or inject scripts. Below is a complete list of vulnerabilities 1. Lack of X.509 certificate verification can be exploited remotely via a specially...

FileMaker Pro vulnerable to cross-site scripting

Overview FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version according to the...

FileMaker Pro fails to verify SSL server certificates

Overview FileMaker Pro contains a function to encrypt communications with the FileMaker Server. FileMaker Pro fails to verify the SSL server certificate. Impact A man-in-the-minddle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Upgrade the software Upgrade to t...

JVN#53579095: FileMaker Pro vulnerable to cross-site scripting

FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version according to the informatio...

JVN#85812843: FileMaker Pro fails to verify SSL server certificates

FileMaker Pro contains a function to encrypt communications with the FileMaker Server. FileMaker Pro fails to verify the SSL server certificate. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Upgrade the software Upgrade to the latest...

FileMaker Pro Software Sharing Detection

Binary data 6897.prm...

FileMaker Pro User Password Disclosure Vulnerability

The remote Filemaker database server is prone to User Password Disclosure Vulnerability, because it does not properly secure credentials during authentication. OpenVAS Vulnerability Test $Id: remote-detect-filemaker-pwd-disclosure.nasl 8022 2017-12-07 08:23:28Z teissa $ Description: FileMaker Pro...

FileMaker Pro User Password Disclosure Vulnerability (Apr 2003) - Active Check

The remote Filemaker database server is prone to a user password disclosure vulnerability, because it does not properly secure credentials during authentication. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are...