VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 22, 2014· Updated Jun 17, 2026

CVE-2014-5322

CVE-2014-5322

Description

Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Filemaker/Filemaker2 versions
    cpe:2.3:a:filemaker:filemaker_pro:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:filemaker:filemaker_pro:*:*:*:*:*:*:*:*range: <=12.0.0.0
    • (no CPE)range: <13
  • Filemaker/Filemaker Pro Advanced2 versions
    cpe:2.3:a:filemaker:filemaker_pro_advanced:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:filemaker:filemaker_pro_advanced:*:*:*:*:*:*:*:*range: <=12.0.0.0
    • (no CPE)range: <13

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.