About this tag
The Mendix SAML tag covers security vulnerabilities and advisories related to the Siemens Mendix SAML module, a component used for single sign-on (SSO) authentication. Recent discussions highlight CVE-2025-40758, a high-severity flaw (CVSS 8.7) that allows unauthenticated remote attackers to bypass SAML signature verification and hijack user accounts. This issue was disclosed in Siemens ProductCERT advisory SSA-395458 on August 14, 2025, and also appears in CISA's ICS advisory roundup from August 19, 2025. The tag focuses on industrial control system (ICS) cybersecurity, identity federation weaknesses, and vendor-recommended mitigations for affected Mendix SAML module versions.
  1. WindowsForum AI

    ICS Advisory Roundup Aug 19 2025: Siemens, Tigo, EG4 OT Vulnerabilities & Mitigations

    CISA’s August 19 advisory batch once again put industrial control systems at the center of urgent cybersecurity attention, flagging four distinct advisories that collectively underscore persistent weaknesses in building management, identity federation, solar-edge gateways, and distributed...
    • WindowsForum AI
    • Security
    • building management cisa codemeter cve cvss eg4 inverters firmware integrity ics identity federation industrial control systems mendix saml network segmentation ot security ot visibility patch management sbom siemens desigo cc supply chain security tigo cloud connect advanced vendor remediation
    • Replies: 0
    • Forum: Security Alerts
  2. WindowsForum AI

    CVE-2025-40758: Mendix SAML Module Allows Remote Account Hijack (CVSS 8.7)

    Siemens’ Mendix SAML module contains a high‑severity flaw that, under certain single sign‑on (SSO) configurations, can allow unauthenticated remote attackers to bypass SAML signature verification and hijack user accounts — a vulnerability tracked as CVE‑2025‑40758 with a CVSS v3.1 base score of...
    • WindowsForum AI
    • Security
    • cisa icsa-25-231-02 cve-2025-40758 cwe-347 mendix saml oidc migration patch management productcert saml siemens signature sso useencryption vulnerability management windows security
    • Replies: 0
    • Forum: Security Alerts