FEDRAMP CATALOG › Mendix Cloud for Government
Mendix Cloud for Government
Siemens Government Technologies · package FR2231561929
Current status
In Process · Moderate impact · since 2026-07-07
Service modelPaaS
MarketplaceRev5 · source: marketplace
Security posture
17 critical
3 high
1 on KEV
· 20 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| In Process | 2026-07-07 | current |
AUTHORIZATIONS
No authorizations recorded.
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-46749 | CVE-2026-46749: A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update |
| CRITICAL | CVE-2026-0258 | CVE-2026-0258: A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation o |
| CRITICAL | CVE-2026-0264 | CVE-2026-0264: A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo |
| HIGH | CVE-2025-40938 | CVE-2025-40938: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). |
| CRITICAL | CVE-2025-10585 | CVE-2025-10585: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote a |
| CRITICAL | CVE-2025-39682 | CVE-2025-39682: In the Linux kernel, the following vulnerability has been resolved: tls: fix ha |
| HIGH | CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability |
| CRITICAL | CVE-2022-25315 | CVE-2022-25315: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNa |
| CRITICAL | CVE-2022-25235 | CVE-2022-25235: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of e |
| CRITICAL | CVE-2022-25236 | CVE-2022-25236: xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert names |
| CRITICAL | CVE-2022-23852 | CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer |
| CRITICAL | CVE-2022-22822 | CVE-2022-22822: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ove |
| CRITICAL | CVE-2022-22823 | CVE-2022-22823: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ov |
| CRITICAL | CVE-2022-22824 | CVE-2022-22824: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an intege |
| CRITICAL | CVE-2021-44228 | CVE-2021-44228: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 |
| CRITICAL | CVE-2021-22945 | CVE-2021-22945: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some |
| CRITICAL | CVE-2021-40438 | CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig |
| CRITICAL | CVE-2020-11656 | CVE-2020-11656: In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, a |
| CRITICAL | CVE-2019-19646 | CVE-2019-19646: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAG |
| CRITICAL | CVE-2019-19317 | CVE-2019-19317: lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in |