Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

30 records

Vendor: Mendix Clear all filters
TI-2024-33752 CVE-2024-50313 · GHSA-q48v-mggj-3532

Race condition in Siemens Mendix Runtime V10

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00275 Published 2024-11-12 Fixed in V10.16.0, V10.12.7 +2 CWE-362
TI-2023-23351 CVE-2023-43623 · GHSA-7953-vwv9-3rqv

Observable discrepancy in Siemens Mendix Forgot Password

Priority LOW 31

A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.3), Mendix Forgot Password (Mendix 8 compati…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00683 Published 2023-10-10 Fixed in V5.4.0, V3.7.3 +1 CWE-203
TI-2023-13568 CVE-2023-29129 · GHSA-fwv7-jrxj-q9qv

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 51

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00888 Published 2023-06-13 No fix listed CWE-303
TI-2023-12196 CVE-2023-27464 · GHSA-7c2m-f7cw-58xj

Observable discrepancy in Siemens Mendix Forgot Password

Priority LOW 30

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatib…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00458 Published 2023-04-11 Fixed in V3.7.1, V4.1.1 +1 CWE-204
TI-2023-11202 CVE-2023-25957 · GHSA-q7cf-mx43-6qm5

Improper authentication in Siemens Mendix SAML

Priority MEDIUM 46

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00581 Published 2023-03-14 No fix listed CWE-303
TI-2023-09634 CVE-2023-23835 · GHSA-j4w7-pf4q-5fwj

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 33

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2023-02-14 Fixed in V7.23.34, V8.18.23 +4 CWE-284
TI-2022-23169 CVE-2022-46823 · GHSA-mqwr-55wx-37jr

Cross-site scripting in Siemens Mendix SAML

Priority MEDIUM 43

A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00483 Published 2023-01-10 No fix listed CWE-79
TI-2022-21853 CVE-2022-44457 · GHSA-r796-qqqw-vxrj

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 50

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions <…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2022-11-08 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2022-17216 CVE-2022-37011 · GHSA-vvx5-72qc-ggwp

Authentication bypass by capture-replay in Siemens Mendix SAML

Priority MEDIUM 45

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01275 Published 2022-09-13 Fixed in V1.17.0, V2.3.0 +2 CWE-294
TI-2022-15360 CVE-2022-34466 · GHSA-3jpc-997v-x927

Injection in Siemens Mendix Applications using Mendix 9

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0072 Published 2022-07-12 Fixed in V9.12.3 CWE-74
TI-2022-13290 CVE-2022-31257 · GHSA-x6gc-63rj-4gw6

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 34

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00776 Published 2022-07-12 Fixed in V7.23.31, V8.18.18 +3 CWE-284
TI-2022-13991 CVE-2022-32286 · GHSA-6cww-xg38-hj24

Cross-site scripting in Siemens Mendix SAML Module

Priority LOW 28

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-79
TI-2022-13990 CVE-2022-32285 · GHSA-v9xm-x7mc-f74g

XML external entity injection in Siemens Mendix SAML Module

Priority LOW 35

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All ve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01043 Published 2022-06-14 Fixed in V1.16.6, V2.2.2 +1 CWE-611
TI-2022-10360 CVE-2022-27241 · GHSA-97hm-cg72-fxrh

Information disclosure in Siemens Mendix Applications using Mendix 7

Priority LOW 36

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2022-04-12 Fixed in V7.23.31, V8.18.18 +2 CWE-200
TI-2022-09234 CVE-2022-25650 · GHSA-55f6-4gr7-2ww5

Improper access control in Siemens Mendix Applications using Mendix 7

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.14), Mendix Applications using Mendix 9 (All versions < V9.12.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00675 Published 2022-04-12 Fixed in V7.23.27, V8.18.14 +2 CWE-284
TI-2022-09695 CVE-2022-26314 · GHSA-v94f-h6hr-hfqh

Missing brute-force protection in Siemens Mendix Forgot Password Appstore module

Priority MEDIUM 45

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01488 Published 2022-03-08 Fixed in V3.2.2 CWE-307
TI-2022-08189 CVE-2022-24309 · GHSA-cg79-xxvp-6224

Improper access control in Siemens Mendix Runtime V7

Priority LOW 36

A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All versions < V9.13 only with Runtime Custom Setting *DataStorage.UseNe…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.006 Published 2022-03-08 Fixed in V7.23.29, V8.18.16 +1 CWE-284
TI-2021-18547 CVE-2021-42026 · GHSA-2j3j-g2v5-fh5c

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 21

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00566 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
TI-2021-18546 CVE-2021-42025 · GHSA-xr6q-pmrg-xhqr

Incorrect authorization in Siemens Mendix Applications using Mendix 8

Priority LOW 30

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2021-11-09 Fixed in V8.18.13, V9.6.2 CWE-863
TI-2021-18536 CVE-2021-42015 · GHSA-2q58-h8f4-6q55

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions <…

Priority LOW 24

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00227 Published 2021-11-09 Fixed in V7.23.26, V8.18.12 +1 CWE-525
TI-2021-11485 CVE-2021-31341 · GHSA-99j4-r9vg-37r9

Information disclosure through error messages in Mendix Database Replication Module

Priority LOW 21

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module (All versions…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00721 Published 2021-05-12 Fixed in v7.0.1 CWE-209
Load more