Mendix Security Vulnerabilities and Issues — Mendix CVE List

SiemensMendix

4 matches found

CVE•added 2021/12/10 12:0 a.m.•7074 views

CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

10CVSS10AI score0.99999EPSS

In wild

CVE•added 2021/12/14 4:55 p.m.•1743 views

CVE-2021-45046

Technical details for CVE-2021-45046 are not publicly provided in the supplied documents. Monitor for updates from official advisories; sources here reference fixes for other Log4j CVEs but do not specify 45046 specifics.

9CVSS9.7AI score0.99977EPSS

In wild

CVE•added 2023/11/14 11:4 a.m.•82 views

CVE-2023-45794

The CVE-2023-45794 issue affects Mendix Applications modernized on Mendix 7/8/9/10. A capture-replay flaw in the Mendix platform can, under app-specific preconditions related to model and access control, allow authenticated attackers to access or modify objects without proper authorization or to ...

8.1CVSS7.1AI score0.0044EPSS

CVE•added 2021/07/13 11:3 a.m.•55 views

CVE-2021-33718

CVE-2021-33718 affects Mendix-based applications across Mendix 7 (<7.23.22), 8 (<8.18.7), and 9 (

5.3CVSS5.1AI score0.00581EPSS