Approved changes feed: RSS · Atom
cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mendix (5cf6cece-91f1-501a-b767-8b108dc7b38b) |
|---|---|
| Product | Mendix (f9020142-d94b-5773-8caa-0b736e86fe80) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mendix/docs |
purl2cpe | 2026-06-01 10:12:36.764491 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-50313 |
vulnerable | 2026-06-08 06:52:09.610212 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.6 (All versions < V10.6.15 only if the basic authentication mechanism is used by the application), Mendix Runtime V8 (All versions only if the basic authentication mechanism is used by the application), Mendix Runtime V9 (All versions < V9.24.29 only if the basic authentication mechanism is used by the application). The basic authentication implementation of affected applications contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures.
Published: 2024-11-12T12:49:54.803Z
Updated: 2025-08-27T21:33:05.238Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23835 |
vulnerable | 2026-06-08 05:56:04.520106 |
Details available
MEDIUM (5.9)
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors.
Published: 2023-02-14T10:36:23.615Z
Updated: 2025-03-20T16:25:54.732Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34466 |
vulnerable | 2026-06-08 05:44:53.590916 |
Details available
A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration.
Published: 2022-07-12T10:07:22.000Z
Updated: 2024-08-03T09:15:15.104Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31257 |
vulnerable | 2026-06-08 05:43:40.610157 |
Details available
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.14.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.2), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). In case of access to an active user session in an application that is built with an affected version, it’s possible to change that user’s password bypassing password validations within a Mendix application. This could allow to set weak passwords.
Published: 2022-07-12T10:06:43.000Z
Updated: 2024-08-03T07:11:39.898Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27241 |
vulnerable | 2026-06-08 05:41:55.107505 |
Details available
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.18), Mendix Applications using Mendix 9 (All versions < V9.11), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.12). Applications built with an affected system publicly expose the internal project structure. This could allow an unauthenticated remote attacker to read confidential information.
Published: 2022-04-12T09:08:00.000Z
Updated: 2024-08-03T05:25:32.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26317 |
vulnerable | 2026-06-08 05:41:50.854704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25650 |
vulnerable | 2026-06-08 05:41:46.231789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24309 |
vulnerable | 2026-06-08 05:41:00.134181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42026 |
vulnerable | 2026-06-08 05:35:21.667635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42025 |
vulnerable | 2026-06-08 05:35:21.667035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42015 |
vulnerable | 2026-06-08 05:35:21.395641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27394 |
vulnerable | 2026-06-08 05:31:21.332166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12996 |
vulnerable | 2026-06-08 05:12:40.761460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.