Lucene search
K

467 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:16 a.m.2 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS6.4AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:2 a.m.9 views

CVE-2023-25957

A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions = V1.16.4 = V2.2.0 = V3.1.9 = V3.1.8 = V3.1.9 = V3.1.8 V3.2.6. The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass...

9.1CVSS7.2AI score0.0006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:0 a.m.3 views

CVE-2023-29129

A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions = V1.17.3 = V1.16.4 = V2.3.0 = V2.2.0 = V3.3.1 = V3.1.9 = V3.3.0 = V3.1.8 = V3.3.1 = V3.3.0 = V3.1.9 = V3.1.8 V3.2.6. The affected versions of the module insufficiently verify the SAML assertions. This could allow...

9.8CVSS7.3AI score0.00092EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:45 a.m.2 views

CVE-2025-40758

A vulnerability has been identified in Mendix SAML Mendix 10.12 compatible All versions V4.0.3, Mendix SAML Mendix 10.21 compatible All versions V4.1.2, Mendix SAML Mendix 9.24 compatible All versions V3.6.21. Affected versions of the module insufficiently enforce signature validation and binding...

8.7CVSS7.3AI score0.0002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:32 a.m.2 views

CVE-2024-39888

A vulnerability has been identified in Mendix Encryption All versions = V10.0.0 V10.0.2. Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an...

8.7CVSS6.7AI score0.00194EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:48 a.m.4 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS6.9AI score0.00537EPSS
Exploits0References1
CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

Siemens Mendix Rich Text Component Cross-Site Scripting Vulnerability

The Mendix Rich Text component is a powerful rich text editor. Create richly formatted text with HTML output. A cross-site scripting vulnerability exists in the Siemens Mendix RichText component, version V4.0.0 through versions prior to V4.6.1, which can be exploited to implant cross-site scripti...

6.8CVSS6AI score0.00027EPSS
Exploits0References1
NVD
NVD
added 2025/11/17 12:15 p.m.3 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/17 11:39 a.m.3 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/17 11:39 a.m.1 views

EUVD-2025-197785

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS6AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/17 11:39 a.m.2 views

CVE-2025-40834

A vulnerability has been identified in Mendix RichText All versions = V4.0.0 V4.6.1. Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks...

6.8CVSS6.1AI score0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/11/17 11:39 a.m.6 views

CVE-2025-40834

CVE-2025-40834 affects the Mendix RichText widget. All versions from 4.0.0 up to 4.6.0 are vulnerable because the widget does not properly neutralize user input, enabling cross-site scripting (XSS). The issue is rooted in insufficient input filtering/escaping within the RichText component. Impact...

6.8CVSS6.1AI score0.00027EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.2 views

PT-2025-47141

Name of the Vulnerable Software and Affected Versions Mendix RichText versions 4.0.0 through 4.6.0 Description The Mendix RichText widget does not properly neutralize input, which could allow an attacker to execute cross-site scripting attacks. Recommendations Update to version 4.6.1 or later...

6.8CVSS6.2AI score0.00027EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

Siemens Mendix RichText 跨站脚本漏洞

The Mendix Rich Text component is a powerful rich text editor. Create richly formatted text with HTML output. A cross-site scripting vulnerability exists in the Siemens Mendix RichText component, version V4.0.0 through versions prior to V4.6.1, which can be exploited to implant cross-site scripti...

6.8CVSS5.9AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-14149

Malware in sbrugna...

8.8CVSS8.7AI score0.00337EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-4571

Malware in sbrugna...

5.3CVSS5.5AI score0.00203EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-20389

Malware in sbrugna...

8.8CVSS8.7AI score0.00246EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-18249

Malware in sbrugna...

4.3CVSS4.9AI score0.00178EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-20395

Malware in sbrugna...

5.3CVSS5.5AI score0.00103EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-18251

Malware in sbrugna...

4.3CVSS4.9AI score0.00199EPSS
Exploits0References3
Rows per page
Query Builder