CVE-2023-42955mediumCWE-257

CVE-2023-42955: medium-severity vulnerability in Claris FileMaker Server

Published · Updated

Follow this CVE+ Monitor FileMaker Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.4%
Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by eliminating the send of Admin Role passwords in the Node.js socket.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
Affected products
Claris · FileMaker Server
Related CVEs — Claris FileMaker Server

In the same product, most dangerous first.

CVE-2025-46295CRITICALCVE-2025-46295EPSS 1.0%CVE-2026-43752MEDIUMCVE-2026-43752EPSS 0.5%CVE-2024-27790HIGHCVE-2024-27790EPSS 0.5%CVE-2023-42954MEDIUMCVE-2023-42954EPSS 0.4%CVE-2026-86934CRITICALCVE-2026-86934EPSS 0.3%CVE-2024-27794MEDIUMCVE-2024-27794EPSS 0.3%