CVE-2014-8347

7.8 highEPSS 1.4%

High (7.8) in claris. EPSS 1.4% chance of exploitation in the next 30 days.

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

claris:filemaker_pro
claris:filemaker_pro_advanced

References

http://packetstormsecurity.com/files/128853/Filemaker-Login-Bypass-Privilege-Escalation.html
http://www.exploit-db.com/exploits/35077
https://exchange.xforce.ibmcloud.com/vulnerabilities/97780
https://lists.openwall.net/bugtraq/2014/10/27/4
https://www.securityfocus.com/archive/1/533814

Check your stack JSON