85 matches found
CVE-2026-89209
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...
CVE-2026-89209
The Mendix SAML module is vulnerable to SAML assertion replay in IdP-initiated authentication flows. This flaw affects Mendix 10 compatible versions prior to V4.2.4 , Mendix 11 compatible versions prior to V4.2.4 , and Mendix 9 compatible versions prior to V3.6.29 . An unauthenticated remote atta...
CVE-2026-89209
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...
EUVD-2026-109739
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...
CVE-2026-89209
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...
PT-2026-123279
Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...
Siemens Mendix SAML Module
SUMMARY Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and...
CVE-2026-80465
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9.24 compatible All versions V3.6.29. Affected versions of the module do not properly validate the SAML response signature. This...
CVE-2026-80465
CVE-2026-80465 affects the Mendix SAML module across multiple compatibility lines: Mendix 10 (all versions < V4.2.3), Mendix 11 (all versions < V4.2.3), and Mendix 9.24 (all versions
EUVD-2026-70411
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...
CVE-2026-80465
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9.24 compatible All versions V3.6.29. Affected versions of the module do not properly validate the SAML response signature. This...
CVE-2026-80465
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9.24 compatible All versions V3.6.29. Affected versions of the module do not properly validate the SAML response signature. This...
CVE-2026-80465: Improper Verification of Cryptographic Signature
A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...
PT-2026-84983
Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.3 Mendix SAML Mendix 11 compatible versions prior to 4.2.3 Mendix SAML Mendix 9.24 compatible versions prior to 3.6.27 Description Certain versions of the Mendix SAML module fail to proper...
Siemens Mendix SAML
SUMMARY Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...
CVE-2021-33712
A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...
CVE-2022-37011
A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions V1.17.0, Mendix SAML Mendix 8 compatible All versions V2.3.0, Mendix SAML Mendix 9 compatible, New Track All versions V3.3.1, Mendix SAML Mendix 9 compatible, Upgrade Track All versions V3.3.0. Affected versions o...
CVE-2023-25957
A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions = V1.16.4 = V2.2.0 = V3.1.9 = V3.1.8 = V3.1.9 = V3.1.8 V3.2.6. The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass...
CVE-2023-29129
A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions = V1.17.3 = V1.16.4 = V2.3.0 = V2.2.0 = V3.3.1 = V3.1.9 = V3.3.0 = V3.1.8 = V3.3.1 = V3.3.0 = V3.1.9 = V3.1.8 V3.2.6. The affected versions of the module insufficiently verify the SAML assertions. This could allow...