Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Mendix Component: Saml Clear all filters
TI-2023-13568 CVE-2023-29129 · GHSA-fwv7-jrxj-q9qv

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 51

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00888 Published 2023-06-13 No fix listed CWE-303
TI-2023-11202 CVE-2023-25957 · GHSA-q7cf-mx43-6qm5

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 46

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00581 Published 2023-03-14 No fix listed CWE-303
TI-2022-23169 CVE-2022-46823 · GHSA-mqwr-55wx-37jr

Cross-site scripting in Siemens Mendix SAML

Priority MEDIUM 43

A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00483 Published 2023-01-10 No fix listed CWE-79
TI-2022-21853 CVE-2022-44457 · GHSA-r796-qqqw-vxrj

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 50

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions <…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2022-11-08 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2022-17216 CVE-2022-37011 · GHSA-vvx5-72qc-ggwp

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 45

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01275 Published 2022-09-13 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2022-13991 CVE-2022-32286 · GHSA-6cww-xg38-hj24

Cross-site scripting in Siemens Mendix SAML Module

Priority LOW 28

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-79
TI-2022-13990 CVE-2022-32285 · GHSA-v9xm-x7mc-f74g

XML external entity injection in Siemens Mendix SAML Module

Priority LOW 35

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-611