VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Nov 22, 2021· Updated Jun 17, 2026

CVE-2021-44147

CVE-2021-44147

Description

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Claris/Filemaker Pro
    cpe:2.3:a:claris:filemaker_pro:*:*:*:*:*:*:*:*
    Range: <19.4.1
  • Claris/Filemaker Server2 versions
    cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*range: <19.4.1
    • (no CPE)range: <19.4.1
  • Claris/FileMaker Pro and Serverdescription
  • Claris/Claris Prollm-fuzzy
    Range: <19.4.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.