CVE-2022-38340

HIGH 7.2CVE-2022-38340 · Published 20/09/2022 · updated 17/06/2026

In short

CVE-2022-38340 is a HIGH (CVSS 7.2) vulnerability affecting fme server (safe).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.6% of all vulnerabilities.
Fix: update to 2022.0.1, 2021.2.6 or later.

Package	Affected versions	Patched versions
fme server safe	`≥ 2022.0.0.0, < 2022.0.1< 2021.2.6`	`2022.0.12021.2.6`

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 2022.0.0.0, < 2022.0.1< 2021.2.6

2022.0.12021.2.6

More vulnerabilities in fme server

See all →