Safe / Fme Server
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-35801 | A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource c… | HIGH | 8.1 | Jun 23, 2023 |
| CVE-2022-38340 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload. | CRITICAL | 9.1 | Sep 20, 2022 |
| CVE-2022-38341 | Safe Software FME Server v2021.2.5 and below does not employ server-side validation. | HIGH | 7.1 | Sep 19, 2022 |
| CVE-2022-38339 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web s… | CRITICAL | 9.6 | Sep 19, 2022 |
| CVE-2022-38342 | Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attack… | HIGH | 8.5 | Sep 13, 2022 |
| CVE-2020-22789 | Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or… | MEDIUM | 6.1 | Apr 28, 2021 |
| CVE-2020-22790 | Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via mo… | MEDIUM | 5.4 | Apr 28, 2021 |
| CVE-2018-20402 | Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account. The passwords to the th… | HIGH | 8.8 | Dec 23, 2018 |
Showing 1 to 8 of 8 CVEs