Known vulnerabilities in Mendix Applications using Mendix 7

Vendor: Siemens
Software: Mendix Applications using Mendix 7
Software CPE: cpe:2.3:a:siemens:mendix_applications_using_mendix_7:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mendix Applications using Mendix 7 Mendix Applications using Mendix 7 is affected by 8 known vulnerabilities: 6 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83214 - Authentication Bypass by Capture-replay
CVE-2023-45794		 CWE-294 Medium
No
No
 7.23.37 16.11.2023 SB2023111606
#VU72460 - Improper Access Control
CVE-2023-23835		 CWE-284 Medium
No
No
 7.23.34 21.02.2023 SB2023022138
#VU65265 - Improper Access Control
CVE-2022-31257		 CWE-284 Low
No
No
 7.23.31 13.07.2022 SB2022071325
#VU62383 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27241		 CWE-200 Medium
No
No
 - 19.04.2022 SB2022041909
#VU62382 - Improper Access Control
CVE-2022-25650		 CWE-284 Low
No
No
 7.23.27 19.04.2022 SB2022041908
#VU61236 - Improper Access Control
CVE-2022-24309		 CWE-284 Medium
No
No
 7.23.29 10.03.2022 SB2022031009
#VU61233 - Improper Access Control
CVE-2022-26317		 CWE-284 Medium
No
No
 7.23.29 10.03.2022 SB2022031009
#VU58197 - Use of Web Browser Cache Containing Sensitive Information
CVE-2021-42015		 CWE-525 Medium
No
No
 7.23.26 16.11.2021 SB2021111621