Read the docs

Mendix

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Mendix records in CISA KEV

No Mendix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mendix 13 records MEDIUM Saml 8 records MEDIUM Forgot Password 5 records MEDIUM Excel Importer 2 records LOW Database Replication 1 record LOW Mendixsso 1 record LOW

Records

8 records in Saml · all components

TI-2023-13568 CVE-2023-29129 · GHSA-fwv7-jrxj-q9qv

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 51

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00888 Published 2023-06-13 No fix listed CWE-303
TI-2022-21853 CVE-2022-44457 · GHSA-r796-qqqw-vxrj

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 50

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions <…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2022-11-08 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2023-11202 CVE-2023-25957 · GHSA-q7cf-mx43-6qm5

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 46

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00581 Published 2023-03-14 No fix listed CWE-303
TI-2022-17216 CVE-2022-37011 · GHSA-vvx5-72qc-ggwp

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 45

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01275 Published 2022-09-13 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2022-23169 CVE-2022-46823 · GHSA-mqwr-55wx-37jr

Cross-site scripting in Siemens Mendix SAML

Priority MEDIUM 43

A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00483 Published 2023-01-10 No fix listed CWE-79
TI-2022-13990 CVE-2022-32285 · GHSA-v9xm-x7mc-f74g

XML external entity injection in Siemens Mendix SAML Module

Priority LOW 35

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-611
TI-2022-13991 CVE-2022-32286 · GHSA-6cww-xg38-hj24

Cross-site scripting in Siemens Mendix SAML Module

Priority LOW 28

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-79
Open these records in search →