Vulnerability Details CVE-2023-23835
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (All versions < V8.18.23), Mendix Applications using Mendix 9 (All versions < V9.22.0), Mendix Applications using Mendix 9 (V9.12) (All versions < V9.12.10), Mendix Applications using Mendix 9 (V9.18) (All versions < V9.18.4), Mendix Applications using Mendix 9 (V9.6) (All versions < V9.6.15). Some of the Mendix runtime API’s allow attackers to bypass XPath constraints and retrieve information using XPath queries that trigger errors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.8%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2023-23835
-
cpe:2.3:a:mendix:mendix:*
-
cpe:2.3:a:mendix:mendix:7.0.2
-
cpe:2.3:a:mendix:mendix:7.1.0
-
cpe:2.3:a:mendix:mendix:7.1.1
-
cpe:2.3:a:mendix:mendix:7.10.0
-
cpe:2.3:a:mendix:mendix:7.11.0
-
cpe:2.3:a:mendix:mendix:7.12.0
-
cpe:2.3:a:mendix:mendix:7.13.1
-
cpe:2.3:a:mendix:mendix:7.14.1
-
cpe:2.3:a:mendix:mendix:7.15.1
-
cpe:2.3:a:mendix:mendix:7.16.0
-
cpe:2.3:a:mendix:mendix:7.17.0
-
cpe:2.3:a:mendix:mendix:7.17.2
-
cpe:2.3:a:mendix:mendix:7.18.0
-
cpe:2.3:a:mendix:mendix:7.18.1
-
cpe:2.3:a:mendix:mendix:7.18.2
-
cpe:2.3:a:mendix:mendix:7.18.3
-
cpe:2.3:a:mendix:mendix:7.18.4
-
cpe:2.3:a:mendix:mendix:7.19.0
-
cpe:2.3:a:mendix:mendix:7.19.1
-
cpe:2.3:a:mendix:mendix:7.2.0
-
cpe:2.3:a:mendix:mendix:7.20.0
-
cpe:2.3:a:mendix:mendix:7.20.1
-
cpe:2.3:a:mendix:mendix:7.21.0
-
cpe:2.3:a:mendix:mendix:7.22.0
-
cpe:2.3:a:mendix:mendix:7.22.1
-
cpe:2.3:a:mendix:mendix:7.22.2
-
cpe:2.3:a:mendix:mendix:7.23.0
-
cpe:2.3:a:mendix:mendix:7.23.1
-
cpe:2.3:a:mendix:mendix:7.23.10
-
cpe:2.3:a:mendix:mendix:7.23.11
-
cpe:2.3:a:mendix:mendix:7.23.12
-
cpe:2.3:a:mendix:mendix:7.23.13
-
cpe:2.3:a:mendix:mendix:7.23.14
-
cpe:2.3:a:mendix:mendix:7.23.15
-
cpe:2.3:a:mendix:mendix:7.23.16
-
cpe:2.3:a:mendix:mendix:7.23.17
-
cpe:2.3:a:mendix:mendix:7.23.18
-
cpe:2.3:a:mendix:mendix:7.23.19
-
cpe:2.3:a:mendix:mendix:7.23.2
-
cpe:2.3:a:mendix:mendix:7.23.20
-
cpe:2.3:a:mendix:mendix:7.23.21
-
cpe:2.3:a:mendix:mendix:7.23.22
-
cpe:2.3:a:mendix:mendix:7.23.23
-
cpe:2.3:a:mendix:mendix:7.23.24
-
cpe:2.3:a:mendix:mendix:7.23.25
-
cpe:2.3:a:mendix:mendix:7.23.26
-
cpe:2.3:a:mendix:mendix:7.23.27
-
cpe:2.3:a:mendix:mendix:7.23.28
-
cpe:2.3:a:mendix:mendix:7.23.29
-
cpe:2.3:a:mendix:mendix:7.23.3
-
cpe:2.3:a:mendix:mendix:7.23.30
-
cpe:2.3:a:mendix:mendix:7.23.31
-
cpe:2.3:a:mendix:mendix:7.23.32
-
cpe:2.3:a:mendix:mendix:7.23.33
-
cpe:2.3:a:mendix:mendix:7.23.4
-
cpe:2.3:a:mendix:mendix:7.23.5
-
cpe:2.3:a:mendix:mendix:7.23.6
-
cpe:2.3:a:mendix:mendix:7.23.7
-
cpe:2.3:a:mendix:mendix:7.23.8
-
cpe:2.3:a:mendix:mendix:7.23.9
-
cpe:2.3:a:mendix:mendix:7.3.0
-
cpe:2.3:a:mendix:mendix:7.4.0
-
cpe:2.3:a:mendix:mendix:7.5.0
-
cpe:2.3:a:mendix:mendix:7.5.1
-
cpe:2.3:a:mendix:mendix:7.6.0
-
cpe:2.3:a:mendix:mendix:7.7.1
-
cpe:2.3:a:mendix:mendix:7.8.0
-
cpe:2.3:a:mendix:mendix:7.9.0
-
cpe:2.3:a:mendix:mendix:8.0.0
-
cpe:2.3:a:mendix:mendix:8.1.0
-
cpe:2.3:a:mendix:mendix:8.10.0
-
cpe:2.3:a:mendix:mendix:8.11.0
-
cpe:2.3:a:mendix:mendix:8.12.0
-
cpe:2.3:a:mendix:mendix:8.12.1
-
cpe:2.3:a:mendix:mendix:8.12.2
-
cpe:2.3:a:mendix:mendix:8.12.3
-
cpe:2.3:a:mendix:mendix:8.12.4
-
cpe:2.3:a:mendix:mendix:8.12.5
-
cpe:2.3:a:mendix:mendix:8.13.0
-
cpe:2.3:a:mendix:mendix:8.14.0
-
cpe:2.3:a:mendix:mendix:8.15.0
-
cpe:2.3:a:mendix:mendix:8.15.1
-
cpe:2.3:a:mendix:mendix:8.15.2
-
cpe:2.3:a:mendix:mendix:8.16.0
-
cpe:2.3:a:mendix:mendix:8.17.0
-
cpe:2.3:a:mendix:mendix:8.17.1
-
cpe:2.3:a:mendix:mendix:8.18.0
-
cpe:2.3:a:mendix:mendix:8.18.1
-
cpe:2.3:a:mendix:mendix:8.18.10
-
cpe:2.3:a:mendix:mendix:8.18.11
-
cpe:2.3:a:mendix:mendix:8.18.12
-
cpe:2.3:a:mendix:mendix:8.18.13
-
cpe:2.3:a:mendix:mendix:8.18.14
-
cpe:2.3:a:mendix:mendix:8.18.15
-
cpe:2.3:a:mendix:mendix:8.18.16
-
cpe:2.3:a:mendix:mendix:8.18.17
-
cpe:2.3:a:mendix:mendix:8.18.2
-
cpe:2.3:a:mendix:mendix:8.18.3
-
cpe:2.3:a:mendix:mendix:8.18.4
-
cpe:2.3:a:mendix:mendix:8.18.5
-
cpe:2.3:a:mendix:mendix:8.18.6
-
cpe:2.3:a:mendix:mendix:8.18.7
-
cpe:2.3:a:mendix:mendix:8.18.8
-
cpe:2.3:a:mendix:mendix:8.18.9
-
cpe:2.3:a:mendix:mendix:8.2.0
-
cpe:2.3:a:mendix:mendix:8.3.0
-
cpe:2.3:a:mendix:mendix:8.4.0
-
cpe:2.3:a:mendix:mendix:8.5.0
-
cpe:2.3:a:mendix:mendix:8.6.0
-
cpe:2.3:a:mendix:mendix:8.6.1
-
cpe:2.3:a:mendix:mendix:8.6.2
-
cpe:2.3:a:mendix:mendix:8.6.3
-
cpe:2.3:a:mendix:mendix:8.6.4
-
cpe:2.3:a:mendix:mendix:8.6.5
-
cpe:2.3:a:mendix:mendix:8.6.6
-
cpe:2.3:a:mendix:mendix:8.6.7
-
cpe:2.3:a:mendix:mendix:8.6.8
-
cpe:2.3:a:mendix:mendix:8.6.9
-
cpe:2.3:a:mendix:mendix:8.7.0
-
cpe:2.3:a:mendix:mendix:8.8.0
-
cpe:2.3:a:mendix:mendix:8.9.0
-
cpe:2.3:a:mendix:mendix:9.0.0
-
cpe:2.3:a:mendix:mendix:9.0.5
-
cpe:2.3:a:mendix:mendix:9.1.0
-
cpe:2.3:a:mendix:mendix:9.1.1
-
cpe:2.3:a:mendix:mendix:9.2.0
-
cpe:2.3:a:mendix:mendix:9.3.0
-
cpe:2.3:a:mendix:mendix:9.4.0
-
cpe:2.3:a:mendix:mendix:9.5.0
-
cpe:2.3:a:mendix:mendix:9.5.1
-
cpe:2.3:a:mendix:mendix:9.6.0
-
cpe:2.3:a:mendix:mendix:9.6.1
-
cpe:2.3:a:mendix:mendix:9.6.2
-
cpe:2.3:a:mendix:mendix:9.7.0