Fme Server
Approved changes feed: RSS · Atom
cpe:2.3:a:safe:fme_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Safe (797cc2ac-05d1-5b1e-a059-717fc0ddc894) |
|---|---|
| Product | Fme Server (429f7b4c-6e56-53c6-a4f1-bcc5d6c3b32a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35801 |
vulnerable | 2026-06-08 06:06:27.777955 |
Details available
A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have access to a user account with write privileges. FME Flow 2023.0 is also a fixed version.
Published: 2023-06-23T00:00:00.000Z
Updated: 2024-11-29T19:33:18.393Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38342 |
vulnerable | 2026-06-08 05:47:16.142622 |
Details available
HIGH (8.5)
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.
Published: 2022-09-13T00:00:00.000Z
Updated: 2024-08-03T10:54:03.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38341 |
vulnerable | 2026-06-08 05:47:16.142182 |
Details available
Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
Published: 2022-09-19T00:00:00.000Z
Updated: 2024-08-03T10:54:03.275Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38340 |
vulnerable | 2026-06-08 05:47:16.141738 |
Details available
CRITICAL (9.1)
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload.
Published: 2022-09-20T00:00:00.000Z
Updated: 2025-05-29T13:45:58.032Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38339 |
vulnerable | 2026-06-08 05:47:16.141133 |
Details available
CRITICAL (9.6)
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.
Published: 2022-09-19T00:00:00.000Z
Updated: 2024-08-03T10:54:03.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20402 |
vulnerable | 2026-06-08 05:11:27.204611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.