CVE-2021-42025CWE-863

CVE-2021-42025: vulnerability in Siemens Mendix Applications using Mendix 8

Published · Updated

Follow this CVE+ Monitor Mendix Applications using Mendix

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control write access for certain client actions. This could allow authenticated attackers to manipulate the content of System.FileDocument objects in some cases, regardless whether they have write access to it.
Affected products
Siemens · Mendix Applications using Mendix 8Siemens · Mendix Applications using Mendix 9
Related CVEs — Siemens Mendix Applications using Mendix 8

In the same product, most dangerous first.

CVE-2021-27394—CVE-2021-27394EPSS 1.4%CVE-2022-27241—CVE-2022-27241EPSS 1.4%CVE-2022-31257—CVE-2022-31257EPSS 0.8%CVE-2022-34466—CVE-2022-34466EPSS 0.7%CVE-2022-25650—CVE-2022-25650EPSS 0.7%CVE-2021-33718—CVE-2021-33718EPSS 0.6%