CVE-2025-46320 in FileMaker Server

الملخص

بحسب MITRE • 24/02/2026

A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Apple
• حجز: 22/04/2025
• إفشاء: 24/02/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-347669
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00219
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-46320
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-46320
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-46320/