A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 12 May 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Code Execution via Unsanitized ODBC Data Source Test in Claris FileMaker Cloud | |
| Weaknesses | CWE-78 |
Tue, 12 May 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: apple
Published:
Updated: 2026-05-12T22:24:57.534Z
Reserved: 2026-05-01T22:46:21.642Z
Link: CVE-2026-43685
No data.
Status : Received
Published: 2026-05-12T23:16:17.973
Modified: 2026-05-12T23:16:17.973
Link: CVE-2026-43685
No data.
OpenCVE Enrichment
Updated: 2026-05-12T23:30:26Z
Weaknesses