Mendix

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Mendix records in CISA KEV

No Mendix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mendix 13 records MEDIUM Saml 8 records MEDIUM Forgot Password 5 records MEDIUM Excel Importer 2 records LOW Database Replication 1 record LOW Mendixsso 1 record LOW

Records

30 records

TI-2023-13568 CVE-2023-29129 · GHSA-fwv7-jrxj-q9qv

Improper authentication in Siemens Mendix SAML

MEDIUM 51

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00888 Published 2023-06-13 No fix listed CWE-303

TI-2022-21853 CVE-2022-44457 · GHSA-r796-qqqw-vxrj

Authentication bypass by capture-replay in Siemens Mendix SAML

MEDIUM 50

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions <…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2022-11-08 Fixed in V1.17.0, V2.3.0 +2 CWE-294

TI-2023-11202 CVE-2023-25957 · GHSA-q7cf-mx43-6qm5

Improper authentication in Siemens Mendix SAML

MEDIUM 46

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00581 Published 2023-03-14 No fix listed CWE-303

TI-2022-17216 CVE-2022-37011 · GHSA-vvx5-72qc-ggwp

Authentication bypass by capture-replay in Siemens Mendix SAML

MEDIUM 45

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01275 Published 2022-09-13 Fixed in V1.17.0, V2.3.0 +2 CWE-294

TI-2022-09695 CVE-2022-26314 · GHSA-v94f-h6hr-hfqh

Missing brute-force protection in Siemens Mendix Forgot Password Appstore module

MEDIUM 45

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01488 Published 2022-03-08 Fixed in V3.2.2 CWE-307

TI-2022-09694 CVE-2022-26313 · GHSA-773v-62jq-mhc6

Improper access control in Siemens Mendix Forgot Password Appstore module

MEDIUM 44

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00968 Published 2022-03-08 No fix listed CWE-284

TI-2022-23169 CVE-2022-46823 · GHSA-mqwr-55wx-37jr

Cross-site scripting in Siemens Mendix SAML

MEDIUM 43

A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00483 Published 2023-01-10 No fix listed CWE-79

TI-2021-08887 CVE-2021-27394 · GHSA-x3jr-ggr7-pvhq

Improper privilege management in Siemens Mendix Applications using Mendix 7

MEDIUM 41

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions <…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01422 Published 2021-04-16 Fixed in V7.23.19, V8.17.0 +3 CWE-269

TI-2021-07804 CVE-2021-25672 · GHSA-898x-g35j-j5cj

Improper access control in Siemens Mendix Forgot Password Appstore module

MEDIUM 40

A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00895 Published 2021-03-15 Fixed in V3.2.1 CWE-284

TI-2021-13086 CVE-2021-33712 · GHSA-5xc3-hrwr-2p8h

Insufficient verification of data authenticity in Siemens Mendix SAML Module

LOW 39

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00604 Published 2021-06-08 Fixed in V2.1.2 CWE-345

TI-2024-33752 CVE-2024-50313 · GHSA-q48v-mggj-3532

Race condition in Siemens Mendix Runtime V10

LOW 36

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2024-11-12 Fixed in V10.16.0, V10.12.7 +2 CWE-362

TI-2022-10360 CVE-2022-27241 · GHSA-97hm-cg72-fxrh

Information disclosure in Siemens Mendix Applications using Mendix 7

LOW 36

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2022-04-12 Fixed in V7.23.31, V8.18.18 +2 CWE-200

TI-2022-08189 CVE-2022-24309 · GHSA-cg79-xxvp-6224

Improper access control in Siemens Mendix Runtime V7

LOW 36

A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNe…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.006 Published 2022-03-08 Fixed in V7.23.29, V8.18.16 +1 CWE-284

TI-2022-13990 CVE-2022-32285 · GHSA-v9xm-x7mc-f74g

XML external entity injection in Siemens Mendix SAML Module

LOW 35

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-611

TI-2022-13290 CVE-2022-31257 · GHSA-x6gc-63rj-4gw6

Improper access control in Siemens Mendix Applications using Mendix 7

LOW 34

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2022-07-12 Fixed in V7.23.31, V8.18.18 +3 CWE-284

TI-2023-09634 CVE-2023-23835 · GHSA-j4w7-pf4q-5fwj

Improper access control in Siemens Mendix Applications using Mendix 7

LOW 33

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2023-02-14 Fixed in V7.23.34, V8.18.23 +4 CWE-284

TI-2023-23351 CVE-2023-43623 · GHSA-7953-vwv9-3rqv

Observable discrepancy in Siemens Mendix Forgot Password

LOW 31

A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.3), Mendix Forgot Password (Mendix 8 compati…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00683 Published 2023-10-10 Fixed in V5.4.0, V3.7.3 +1 CWE-203

TI-2022-09697 CVE-2022-26317 · GHSA-hxgm-gwx3-35x7

Improper access control in Siemens Mendix Applications using Mendix 7

LOW 31

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00956 Published 2022-03-08 Fixed in V7.23.29 CWE-284

TI-2023-12196 CVE-2023-27464 · GHSA-7c2m-f7cw-58xj

Observable discrepancy in Siemens Mendix Forgot Password

LOW 30

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatib…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00458 Published 2023-04-11 Fixed in V3.7.1, V4.1.1 +1 CWE-204

TI-2022-15361 CVE-2022-34467 · GHSA-mhjg-98h7-6g9w

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible)…

LOW 30

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00774 Published 2022-07-12 Fixed in V9.2.2, V10.1.2 CWE-776

TI-2022-15360 CVE-2022-34466 · GHSA-3jpc-997v-x927

Injection in Siemens Mendix Applications using Mendix 9

LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0072 Published 2022-07-12 Fixed in V9.12.3 CWE-74

TI-2022-09234 CVE-2022-25650 · GHSA-55f6-4gr7-2ww5

Improper access control in Siemens Mendix Applications using Mendix 7

LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.14), Mendix Applications using Mendix 9 (All versions < V9.12.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00675 Published 2022-04-12 Fixed in V7.23.27, V8.18.14 +2 CWE-284

TI-2021-18546 CVE-2021-42025 · GHSA-xr6q-pmrg-xhqr

Incorrect authorization in Siemens Mendix Applications using Mendix 8

LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863

TI-2022-13991 CVE-2022-32286 · GHSA-6cww-xg38-hj24

Cross-site scripting in Siemens Mendix SAML Module

LOW 28

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-79

TI-2020-06578 CVE-2020-8160 · GHSA-7726-7mp9-p4f2

Cross-site scripting in MendixSSO

LOW 28

MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00723 Published 2021-01-06 No fix listed CWE-79

Open these records in search →

Critical	7
High	8
Medium	15
Low	0
No CVSS	0