Vulnerability Details CVE-2022-38341
Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.0%
CVSS Severity
CVSS v3 Score 7.1
References
- https://community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server
- https://www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/
- https://community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server
- https://www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/
Products affected by CVE-2022-38341
-
cpe:2.3:a:safe:fme_server:2021.2.3