CVE-2022-34467

MEDIUM 6.5CVE-2022-34467 · Published 12/07/2022 · updated 17/06/2026

In short

CVE-2022-34467 is a MEDIUM (CVSS 6.5) vulnerability affecting excel importer (mendix).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.8% of all vulnerabilities.
Fix: update to 10.1.2, 9.2.2 or later.

Package	Affected versions	Patched versions
excel importer mendix	`≥ 10.0.0, < 10.1.2< 9.2.2`	`10.1.29.2.2`

Description

A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compatible) (All versions < V10.1.2). The affected component is vulnerable to XML Entity Expansion Injection. An attacker may use this to compromise the availability of the affected component.

References

cert-portal.siemens.com/productcert/pdf/ssa-610768.pdf · Patch

More vulnerabilities in excel importer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free