Riskcovery

CVE-2022-32285

State
Published
Severity
Not scored
Published
Jun 14, 2022
Updated
Aug 3, 2024
Reserved
Jun 3, 2022

Read the record on cve.org

Description

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). The affected module is vulnerable to XML External Entity (XXE) attacks due to insufficient input sanitation. This may allow an attacker to disclose confidential data under certain circumstances.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-611 Improper Restriction of XML External Entity Reference

Affected Products

ProductVersions
Mendix SAML Module (Mendix 7 compatible)Siemens
  • All versions < V1.16.6Affected
Mendix SAML Module (Mendix 8 compatible)Siemens
  • All versions < V2.2.2Affected
Mendix SAML Module (Mendix 9 compatible)Siemens
  • All versions < V3.2.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.