A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions < V10.12.16), Mendix Runtime V10.18 (All versions < V10.18.5), Mendix Runtime V10.6 (All versions < V10.6.22), Mendix Runtime V8 (All versions < V8.18.35), Mendix Runtime V9 (All versions < V9.24.34). Affected applications allow for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Mendix Runtime V10
Vendor
Siemens
Product
Mendix Runtime V10
Platforms
Unknown
Default status
unknown
Mendix Runtime V10 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.21.0
Unavailable
None listed
Mendix Runtime V10.12
Vendor
Siemens
Product
Mendix Runtime V10.12
Platforms
Unknown
Default status
unknown
Mendix Runtime V10.12 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.12.16
Unavailable
None listed
Mendix Runtime V10.18
Vendor
Siemens
Product
Mendix Runtime V10.18
Platforms
Unknown
Default status
unknown
Mendix Runtime V10.18 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.18.5
Unavailable
None listed
Mendix Runtime V10.6
Vendor
Siemens
Product
Mendix Runtime V10.6
Platforms
Unknown
Default status
unknown
Mendix Runtime V10.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.6.22
Unavailable
None listed
Mendix Runtime V8
Vendor
Siemens
Product
Mendix Runtime V8
Platforms
Unknown
Default status
unknown
Mendix Runtime V8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V8.18.35
Unavailable
None listed
Mendix Runtime V9
Vendor
Siemens
Product
Mendix Runtime V9
Platforms
Unknown
Default status
unknown
Mendix Runtime V9 · Scoped product and version facts