VULNERABILITY INTELLIGENCE
CVE-2025-46296
CVSS score5.4 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-12-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description
An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-285
Primary references
- product-security@apple.com — Vendor Advisory