Read the docs

Mendix

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Mendix records in CISA KEV

No Mendix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mendix 13 records MEDIUM Saml 8 records MEDIUM Forgot Password 5 records MEDIUM Excel Importer 2 records LOW Database Replication 1 record LOW Mendixsso 1 record LOW

Records

1 record in Mendixsso · all components

TI-2020-06578 CVE-2020-8160 · GHSA-7726-7mp9-p4f2

Cross-site scripting in MendixSSO

Priority LOW 28

MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00723 Published 2021-01-06 No fix listed CWE-79
Open these records in search →