CVE-2014-5322
Last modified
CVE-2014-5322 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Filemaker | Filemaker Pro | <= 12.0.0.0 |
| Filemaker | Filemaker Pro Advanced | <= 12.0.0.0 |
References
- http://jvn.jp/en/jp/JVN53579095/index.htmlVendor Advisory
- http://jvn.jp/en/jp/JVN53579095/index.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-5322?
How severe is CVE-2014-5322?
How do I fix CVE-2014-5322?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-5316Cross-site scripting (XSS) vulnerability in Dotclear before …
- CVE-2014-5317Cross-site scripting (XSS) vulnerability in php365.com 365 L…
- CVE-2014-5318The jigbrowser+ application 1.8.1 and earlier for iOS allows…
- CVE-2014-5319Directory traversal vulnerability in the S-Link SLFileManage…
- CVE-2014-5320The Bump application for Android does not properly handle im…
- CVE-2014-5321FileMaker Pro before 13 and Pro Advanced before 13 does not …
- CVE-2014-5323The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) …
- CVE-2014-5324Unrestricted file upload vulnerability in the N-Media file u…
- CVE-2014-5325The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter,…
- CVE-2014-5326Cross-site scripting (XSS) vulnerability in Direct Web Remot…
- CVE-2014-5327Buffer overflow in the Webserver component on the Huawei E53…
- CVE-2014-5328Buffer overflow in the Webserver component on the Huawei E53…
Are you affected by CVE-2014-5322?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST