GCVE - cpe:2.3:a:filemaker:filemaker_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:filemaker:filemaker_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Filemaker (`b4fa2894-5f05-59fb-bc6f-ff284e55ed56`)
Product	Filemaker Pro (`695608a9-89fa-5baf-9bd7-bcb935b61934`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5322`	vulnerable	2026-06-08 05:05:47.539549	Details available Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640. Published: 2014-09-22T01:00:00.000Z Updated: 2024-08-06T11:41:48.621Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030880 http://jvn.jp/en/jp/JVN53579095/index.html http://www.securityfocus.com/bid/69987 http://jvndb.jvn.jp/jvndb/JVNDB-2014-000113	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5321`	vulnerable	2026-06-08 05:05:47.538279	Details available FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2319. Published: 2014-09-22T01:00:00.000Z Updated: 2024-08-06T11:41:48.619Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2014-000114 http://jvn.jp/en/jp/JVN85812843/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3640`	vulnerable	2026-06-08 05:04:32.435306	Details available Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2013-06-10T17:00:00.000Z Updated: 2024-09-16T23:30:42.781Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN53579095/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2013-000049	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2319`	vulnerable	2026-06-08 05:04:24.852883	Details available FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Published: 2013-06-10T17:00:00.000Z Updated: 2024-09-17T03:37:35.004Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2013-000048 http://jvn.jp/en/jp/JVN85812843/index.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.