Mendix

30 CVEs across 6 Mendix products. Browse Mendix vulnerabilities, severities, and proof-of-concept exploits.

Mendix products with known CVEs

ProductCVEs
Mendix13
Saml8
Forgot Password5
Excel Importer2
Database Replication1
Mendixsso1
Mendix CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-50313Medium5.32024-11-12A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mend…
CVE-2023-43623Medium5.32023-10-10A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Forgot Password (Mendix 7 compatible) (All…
CVE-2023-29129Critical9.12023-06-13A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SAML (Mendix 7 compatible) (All versions >…
CVE-2023-27464Medium5.32023-04-11A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All…
CVE-2023-25957Critical9.12023-03-14A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >…
CVE-2023-23835Medium5.92023-02-14A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.2…
CVE-2022-46823Critical9.32023-01-10A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All v…
CVE-2022-44457Critical9.82022-11-08A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 <…
CVE-2022-37011Critical9.82022-09-13A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), M…
CVE-2022-34467Medium6.52022-07-12A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compa…
CVE-2022-34466Medium6.52022-07-12A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All vers…
CVE-2022-31257High7.52022-07-12A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.1…
CVE-2022-32286Medium6.12022-06-14A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All version…
CVE-2022-32285High7.52022-06-14A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All version…
CVE-2022-27241High7.52022-04-12A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.1…
CVE-2022-25650Medium6.52022-04-12A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (All versions < V8.18.1…
CVE-2022-26317Medium6.52022-03-08A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a completed Microflow executi…
CVE-2022-26314Critical9.82022-03-08A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix…
CVE-2022-26313Critical9.82022-03-08A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected prod…
CVE-2022-24309Medium6.82022-03-08A vulnerability has been identified in Mendix Runtime V7 (All versions < V7.23.29), Mendix Runtime V8 (All versions < V8.18.16), Mendix Runtime V9 (All version…
CVE-2021-42026Medium4.32021-11-09A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2)…
CVE-2021-42025Medium6.52021-11-09A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2)…
CVE-2021-42015Medium5.52021-11-09A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.1…
CVE-2021-33712High8.82021-06-08A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restric…
CVE-2021-31341Medium4.32021-05-12Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-fram…
CVE-2021-31339Medium4.32021-05-12A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that coul…
CVE-2021-27394High8.82021-04-16A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0…
CVE-2021-25672High8.82021-03-15A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly…
CVE-2020-8160Medium6.12021-01-06MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This…
CVE-2019-12996Medium5.32019-09-10In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe.