Siemens Mendix Runtime v9 vulnerabilities

2 CVEs affecting Siemens Mendix Runtime v9, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30280, published 2025-04-08.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-30280, published 2025-04-08. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions < V10.12.16), Mendix Runtime V10.18 (All versions < V10.18.5), Mendix Runtime…
• CVE-2023-49069, published 2024-09-10. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.17.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions <…