CVE-2022-32285

CVE-2022-32285

Vendor Siemens
Product Mendix SAML Module (Mendix 7 compatible)
Weakness CWE-611 · XXE
Published June 14, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). The affected module is vulnerable to XML External Entity (XXE) attacks due to insufficient input sanitation. This may allow an attacker to disclose confidential data under certain circumstances.

Key dates

02Disclosure timeline

June 14, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read CVE-2022-42341 Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read CVE-2021-3836 Improper Restriction of XML External Entity Reference in dbeaver/dbeaver CVE-2022-4607 3D City Database OGC Web Feature Service xml external entity reference CVE-2025-49535 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)