CVE-2021-33718: Siemens Mendix

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Applications using Mendix 9 (All versions < V9.3.0). Write access checks of attributes of an object could be bypassed, if user has a write permissions to the first attribute of this object.

Affected products

• Siemens Mendix: from 7.0, before 7.23.22 (fixed in 7.23.22); from 8.0, before 8.18.7 (fixed in 8.18.7); from 9.0, before 9.3.0 (fixed in 9.3.0)

Published 2021-07-13. Last modified 2026-06-17.