Vendor
Siemens
30 known vulnerabilities in products by Siemens, 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-26314 | Siemens Mendix Forgot Password Appstore module: Improper Restriction of Excessive Authentication Attempts | 9.8 | |
| Critical | CVE-2022-37011 | Siemens Mendix SAML (Mendix 7 compatible): Authentication Bypass by Capture-replay | 9.8 | |
| High | CVE-2021-27394 | Siemens Mendix Applications using Mendix 7: Improper Privilege Management | 8.8 | |
| Critical | CVE-2022-26313 | Siemens Mendix Forgot Password Appstore module: Improper Access Control | 9.8 | |
| Critical | CVE-2023-29129 | Siemens Mendix SAML (Mendix 7 compatible): Incorrect Implementation of Authentication Algorithm | 9.8 | |
| High | CVE-2022-27241 | Siemens Mendix Applications using Mendix 7: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Critical | CVE-2022-44457 | Siemens Mendix SAML (Mendix 7 compatible): Authentication Bypass by Capture-replay | 9.8 | |
| High | CVE-2021-25672 | Siemens Mendix Forgot Password Appstore module: Improper Access Control | 8.8 | |
| High | CVE-2022-32285 | Siemens Mendix SAML Module (Mendix 7 compatible): Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2022-31257 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 7.5 | |
| Medium | CVE-2022-26317 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 6.5 | |
| High | CVE-2021-33712 | Siemens Mendix SAML Module: Insufficient Verification of Data Authenticity | 8.8 | |
| Critical | CVE-2022-46823 | Siemens Mendix SAML (Mendix 8 compatible): Cross-site Scripting | 9.3 | |
| Medium | CVE-2022-34467 | Siemens Mendix Excel Importer Module (Mendix 8 compatible): XML Entity Expansion | 6.5 | |
| Critical | CVE-2023-25957 | Siemens Mendix SAML (Mendix 7 compatible): Incorrect Implementation of Authentication Algorithm | 7.5 | |
| Medium | CVE-2022-34466 | Siemens Mendix Applications using Mendix 9: Injection | 6.5 | |
| Medium | CVE-2022-25650 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 6.5 | |
| Medium | CVE-2020-8160 | MendixSSO: Cross-site Scripting | 6.1 | |
| High | CVE-2022-24309 | Siemens Mendix Runtime V7: Improper Access Control | 6.8 | |
| Medium | CVE-2019-12996 | Mendix: security vulnerability | 5.3 | |
| Medium | CVE-2023-43623 | Siemens Mendix Forgot Password: Observable Discrepancy | 5.3 | |
| Medium | CVE-2021-42025 | Siemens Mendix Applications using Mendix 8: Incorrect Authorization | 6.5 | |
| Medium | CVE-2022-32286 | Siemens Mendix SAML Module (Mendix 7 compatible): Cross-site Scripting | 6.1 | |
| High | CVE-2023-23835 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 5.9 | |
| Medium | CVE-2021-31339 | Siemens Mendix Excel Importer Module: Generation of Error Message Containing Sensitive Information | 4.3 |
News
- SSA-638652 V1.0: Authentication Bypass Vulnerability in Mendix SAML Modulesiemens-productcert
- SSA-851884 V1.0: Authentication Bypass Vulnerability in Mendix SAML Modulesiemens-productcert