Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Mendix Component: Mendix Clear all filters
TI-2024-33752 CVE-2024-50313 · GHSA-q48v-mggj-3532

Race condition in Siemens Mendix Runtime V10

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2024-11-12 Fixed in V10.16.0, V10.12.7 +2 CWE-362
TI-2023-09634 CVE-2023-23835 · GHSA-j4w7-pf4q-5fwj

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 33

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2023-02-14 Fixed in V7.23.34, V8.18.23 +4 CWE-284
TI-2022-15360 CVE-2022-34466 · GHSA-3jpc-997v-x927

Injection in Siemens Mendix Applications using Mendix 9

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0072 Published 2022-07-12 Fixed in V9.12.3 CWE-74
TI-2022-13290 CVE-2022-31257 · GHSA-x6gc-63rj-4gw6

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 34

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2022-07-12 Fixed in V7.23.31, V8.18.18 +3 CWE-284
TI-2022-10360 CVE-2022-27241 · GHSA-97hm-cg72-fxrh

Information disclosure in Siemens Mendix Applications using Mendix 7

Priority LOW 36

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2022-04-12 Fixed in V7.23.31, V8.18.18 +2 CWE-200
TI-2022-09234 CVE-2022-25650 · GHSA-55f6-4gr7-2ww5

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.14), Mendix Applications using Mendix 9 (All versions < V9.12.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00675 Published 2022-04-12 Fixed in V7.23.27, V8.18.14 +2 CWE-284
TI-2022-08189 CVE-2022-24309 · GHSA-cg79-xxvp-6224

Improper access control in Siemens Mendix Runtime V7

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNe…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.006 Published 2022-03-08 Fixed in V7.23.29, V8.18.16 +1 CWE-284
TI-2021-18547 CVE-2021-42026 · GHSA-2j3j-g2v5-fh5c

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 21

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00566 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
TI-2021-18546 CVE-2021-42025 · GHSA-xr6q-pmrg-xhqr

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
TI-2021-18536 CVE-2021-42015 · GHSA-2q58-h8f4-6q55

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions <…

Priority LOW 24

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2021-11-09 Fixed in V7.23.26, V8.18.12 +1 CWE-525
TI-2021-08887 CVE-2021-27394 · GHSA-x3jr-ggr7-pvhq

Improper privilege management in Siemens Mendix Applications using Mendix 7

Priority MEDIUM 41

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions <…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01422 Published 2021-04-16 Fixed in V7.23.19, V8.17.0 +3 CWE-269