High SSA-395458 1 CVE

SSA-395458: Account Hijacking Vulnerability in Mendix SAML Module

Published Aug 14, 2025 · Updated Aug 14, 2025

Vendor: Siemens Product: Mendix SAML (Mendix 10.12 compatible) Product: Mendix SAML (Mendix 10.21 compatible) Product: Mendix SAML (Mendix 9.24 compatible)

Summary

Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations.

Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.

Vulnerabilities 1

High 8.7

CVE-2025-40758

A vulnerability has been identified in Mendix SAML (Mendix 10.12 compatible) (All versions < V4.0.3), Mendix SAML (Mend…

Siemens Mendix SAML (Mendix 9.24 compatible) Mendix SAML (Mendix 10.21 compatible) Mendix SAML (Mendix 10.12 compatible) ICS / OT

Aug 14, 2025

Revision history

2025-08-14 #1
Publication Date

References

SSA-395458: Account Hijacking Vulnerability in Mendix SAML Module - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-395458.html