CVE-2022-38341

high

Description

Safe Software FME Server v2021.2.5 and below does not employ server-side validation.

References

https://www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/

https://community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server

Details

Source: Mitre, NVD

Published: 2022-09-19

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:N

Severity: High

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Severity: High

EPSS

EPSS: 0.00161