CVE-2021-44147: Claris Filemaker Pro

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An XML External Entity issue in Claris FileMaker Pro and Server (including WebDirect) before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks.

Affected products

• Claris Filemaker Pro: before 19.4.1 (fixed in 19.4.1)
• Claris Filemaker Server: before 19.4.1 (fixed in 19.4.1)

Published 2021-11-22. Last modified 2026-06-17.