← Back to home
ICSA-22-104-17  ·  Published 2025-05-06  ·  View on CISA ICS-CERT ↗

Siemens Mendix

CVSS 3.1 LOW

CVEs (1)

Remediations

  • Update your Mendix Project to V7.23.27 or later version and redeploy your application
  • Update your Mendix Project to V8.18.14 or later version and redeploy your application
  • Update your Mendix Project to V9.12.0 or later version and redeploy your application
  • Update your Mendix Project to V9.6.3 or later (preferably to the latest V9.12 version) and redeploy your application
  • The behavior of sorting by non-accessible attributes can be changed by changing the value of the DataStorage.EnableOrderByEntityAccess custom runtime setting to true. Starting with version 9.12 it is turned on by default with the new, improved behavior.

Affected Vendors

Siemens

Affected Products (4)

Siemens · Mendix Applications using Mendix 7 <V7.23.27
Siemens · Mendix Applications using Mendix 8 <V8.18.14
Siemens · Mendix Applications using Mendix 9 <V9.12.0
Siemens · Mendix Applications using Mendix 9 (V9.6) <V9.6.3

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more