Product by Siemens
Mendix
16 known vulnerabilities in Mendix (Siemens), 2 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
2
Actively exploited (KEV)
2
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 76 other products | 10.0 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 24 other products | 9.0 | |
| High | CVE-2021-27394 | Siemens Mendix Applications using Mendix 7: Improper Privilege Management | 8.8 | |
| High | CVE-2022-27241 | Siemens Mendix Applications using Mendix 7: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2022-31257 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 7.5 | |
| Medium | CVE-2022-26317 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 6.5 | |
| Medium | CVE-2022-34466 | Siemens Mendix Applications using Mendix 9: Injection | 6.5 | |
| Medium | CVE-2022-25650 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 6.5 | |
| High | CVE-2022-24309 | Siemens Mendix Runtime V7: Improper Access Control | 6.8 | |
| Medium | CVE-2021-42025 | Siemens Mendix Applications using Mendix 8: Incorrect Authorization | 6.5 | |
| High | CVE-2023-45794 | Siemens Mendix Applications using Mendix: Authentication Bypass by Capture-replay | 6.8 | |
| High | CVE-2023-23835 | Siemens Mendix Applications using Mendix 7: Improper Access Control | 5.9 | |
| Medium | CVE-2021-33718 | Siemens Mendix Applications using Mendix 7: Incorrect Authorization | 5.3 | |
| Medium | CVE-2024-50313 | Siemens Mendix Runtime V10: Race Condition | 5.3 | |
| Medium | CVE-2021-42026 | Siemens Mendix Applications using Mendix 8: Incorrect Authorization | 4.3 | |
| Medium | CVE-2021-42015 | Siemens Mendix Applications using Mendix 7: Use of Web Browser Cache Containing Sensitive Information | 5.5 |
News
- There's only so much code: the rise in vulnerability numberscisco-talos,
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert