CVE-2022-32286

CVE-2022-32286

Vendor Siemens
Product Mendix SAML Module (Mendix 7 compatible)
Weakness CWE-79 · XSS
Published June 14, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.2.2), Mendix SAML Module (Mendix 9 compatible) (All versions < V3.2.3). In certain configurations SAML module is vulnerable to Cross Site Scripting (XSS) attacks due to insufficient error message sanitation. This could allow an attacker to execute malicious code by tricking users into accessing a malicious link.

Key dates

02Disclosure timeline

June 14, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE