Vulnerabilities > Safe > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-23 CVE-2023-35801 Path Traversal vulnerability in Safe FME Server
A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files.
network
low complexity
safe CWE-22
8.1
2022-09-20 CVE-2022-38340 Path Traversal vulnerability in Safe FME Server
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload.
network
low complexity
safe CWE-22
7.2
2022-09-19 CVE-2022-38341 Unspecified vulnerability in Safe FME Server 2021.2.3
Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
network
low complexity
safe
7.1
2018-12-23 CVE-2018-20402 Insecure Default Initialization of Resource vulnerability in Safe FME Server
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account.
network
low complexity
safe CWE-1188
8.8