Read the docs

Mendix

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Mendix records in CISA KEV

No Mendix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mendix 13 records MEDIUM Saml 8 records MEDIUM Forgot Password 5 records MEDIUM Excel Importer 2 records LOW Database Replication 1 record LOW Mendixsso 1 record LOW

Records

13 records in Mendix · all components

TI-2021-08887 CVE-2021-27394 · GHSA-x3jr-ggr7-pvhq

Improper privilege management in Siemens Mendix Applications using Mendix 7

Priority MEDIUM 41

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions <…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01422 Published 2021-04-16 Fixed in V7.23.19, V8.17.0 +3 CWE-269
TI-2024-33752 CVE-2024-50313 · GHSA-q48v-mggj-3532

Race condition in Siemens Mendix Runtime V10

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2024-11-12 Fixed in V10.16.0, V10.12.7 +2 CWE-362
TI-2022-10360 CVE-2022-27241 · GHSA-97hm-cg72-fxrh

Information disclosure in Siemens Mendix Applications using Mendix 7

Priority LOW 36

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2022-04-12 Fixed in V7.23.31, V8.18.18 +2 CWE-200
TI-2022-08189 CVE-2022-24309 · GHSA-cg79-xxvp-6224

Improper access control in Siemens Mendix Runtime V7

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNe…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.006 Published 2022-03-08 Fixed in V7.23.29, V8.18.16 +1 CWE-284
TI-2022-13290 CVE-2022-31257 · GHSA-x6gc-63rj-4gw6

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 34

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2022-07-12 Fixed in V7.23.31, V8.18.18 +3 CWE-284
TI-2023-09634 CVE-2023-23835 · GHSA-j4w7-pf4q-5fwj

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 33

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2023-02-14 Fixed in V7.23.34, V8.18.23 +4 CWE-284
TI-2022-15360 CVE-2022-34466 · GHSA-3jpc-997v-x927

Injection in Siemens Mendix Applications using Mendix 9

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0072 Published 2022-07-12 Fixed in V9.12.3 CWE-74
TI-2022-09234 CVE-2022-25650 · GHSA-55f6-4gr7-2ww5

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.14), Mendix Applications using Mendix 9 (All versions < V9.12.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00675 Published 2022-04-12 Fixed in V7.23.27, V8.18.14 +2 CWE-284
TI-2021-18546 CVE-2021-42025 · GHSA-xr6q-pmrg-xhqr

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
TI-2021-18536 CVE-2021-42015 · GHSA-2q58-h8f4-6q55

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions <…

Priority LOW 24

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2021-11-09 Fixed in V7.23.26, V8.18.12 +1 CWE-525
TI-2021-18547 CVE-2021-42026 · GHSA-2j3j-g2v5-fh5c

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 21

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00566 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
Open these records in search →