Not rated
CVE-2022-34466 A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix…
Description
A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mendix Applications using Mendix 9 | Versions not published | |
| Mendix Applications using Mendix 9 (V9.12) | Versions not published |
Other CVEs of Mendix Applications using Mendix 9
The 12 CVEs of Mendix Applications using Mendix 9 →
CVE-2024-33500
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.11.0), Mendix…
5.9
Medium
CVE-2023-45794
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications…
6.8
Medium
CVE-2023-23835
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications…
5.9
Medium
CVE-2022-31257
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications…
Not rated