|  | 
Vulnerability CVE-2022-34466
 Published: 2022-07-12
 
	
		| Description: | 
	 
	
		A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration. | 
	 
	 
Type:
 CWE-74
				 CVSS2 => (AV:N/AC:M/Au:S/C:P/I:N/A:N)
				| CVSS Base Score | 
Impact Subscore | 
Exploitability Subscore |  
							3.5/10 | 
							2.9/10 | 
							6.8/10 | 
					 
				 
	
						| Exploit range | 
						Attack complexity | 
						Authentication | 
				 
						Remote | 
						Medium | 
						Single time | 
				 
						| Confidentiality impact | 
						Integrity impact | 
						Availability impact | 
				 
						Partial | 
						None | 
						None | 
				 
			 
 References: |  
https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf 
 |  
 
	
 |  
 |  
  
closedb();
?>
 
Copyright 2025, cxsecurity.com 
      | 
     | 
     |