CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll...

7.8 HighPublic exploit

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.35%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2014-8347
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8347
Updated: 2026-11-02

EUVDEUVD-2014-8185 No score

Record: EUVD-2014-8185
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7xc8-7jx7-7hc2 No score

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll...

Record: GHSA-7xc8-7jx7-7hc2
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Filemaker Pro 13.03 / Advanced 12.04 - Authentication Bypass / Privilege Escalation	2014-10-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8347 is a high vulnerability (CVSS 7.8) in Claris Filemaker Pro, published February 11, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.35%, the 71st percentile. No source names a fixed version.