CVE-2022-46664: Siemens Mendix Workflow Commons

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information.

Affected products

• Siemens Mendix Workflow Commons: before 2.4.0 (fixed in 2.4.0)

Published 2022-12-13. Last modified 2026-06-17.