{"id":2568,"date":"2026-10-06T13:37:56","date_gmt":"2026-10-06T13:37:56","guid":{"rendered":"https:\/\/the-s-unit.nl\/?page_id=2568"},"modified":"2026-11-06T19:52:17","modified_gmt":"2026-11-06T19:52:17","slug":"the-s-unit-top-10","status":"publish","type":"page","link":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/","title":{"rendered":"The S-Unit Top 10"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2568\" class=\"elementor elementor-2568 elementor-324\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7574918 e-flex e-con-boxed e-con e-parent\" data-id=\"7574918\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-0d1f9b5 e-con-full e-flex e-con e-child\" data-id=\"0d1f9b5\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-240cbbd elementor-widget elementor-widget-heading\" data-id=\"240cbbd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">The S-Unit Mendix Top 10<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f09ad7 elementor-widget elementor-widget-heading\" data-id=\"8f09ad7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">Inspired by OWASP and shaped by more than 10 years of offensive security experience, The S-Unit Top 10 reveals the Mendix-specific vulnerabilities that can open the door to an attack<\/p>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-015b66e elementor-widget elementor-widget-text-editor\" data-id=\"015b66e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tBased on insights from hundreds of Mendix penetration tests.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5ea4413 e-con-full e-flex e-con e-child\" data-id=\"5ea4413\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-97233ee elementor-widget elementor-widget-image\" data-id=\"97233ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"2500\" height=\"2479\" src=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp\" class=\"attachment-full size-full wp-image-2579\" alt=\"\" srcset=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp 2500w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-300x297.webp 300w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-1024x1015.webp 1024w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-150x150.webp 150w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-768x762.webp 768w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-1536x1523.webp 1536w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB-2048x2031.webp 2048w\" sizes=\"(max-width: 2500px) 100vw, 2500px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-98da0dc e-flex e-con-boxed e-con e-parent\" data-id=\"98da0dc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-dc92e99 e-con-full e-flex e-con e-child\" data-id=\"dc92e99\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fba0159 elementor-widget elementor-widget-heading\" data-id=\"fba0159\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Check the most common vulnerabilities in Mendix<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a384bb7 e-con-full e-flex e-con e-child\" data-id=\"a384bb7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t<div class=\"elementor-element elementor-element-c600d3c e-con-full e-flex e-con e-child\" data-id=\"c600d3c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[],&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d13054f elementor-widget elementor-widget-n-accordion\" data-id=\"d13054f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;all_collapsed&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2190\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2190\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-01: Insecure user roles <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2190\" class=\"elementor-element elementor-element-5d50bac e-con-full e-flex e-con e-child\" data-id=\"5d50bac\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8aab96b elementor-widget elementor-widget-text-editor\" data-id=\"8aab96b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tA correctly configured module role linked to the wrong user role can give users access they were never meant to have.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bc5a025 elementor-widget elementor-widget-button\" data-id=\"bc5a025\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-01\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2191\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2191\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-02: Insecure entity access <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2191\" class=\"elementor-element elementor-element-00a6f24 e-con-full e-flex e-con e-child\" data-id=\"00a6f24\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b04b8ed elementor-widget elementor-widget-text-editor\" data-id=\"b04b8ed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tThe entity access rule itself is incorrectly configured, exposing data regardless of which user role it is linked to.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5dbe4eb elementor-widget elementor-widget-button\" data-id=\"5dbe4eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-02\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2192\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2192\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-03: Insecure microflows <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2192\" class=\"elementor-element elementor-element-b67aef9 e-con-full e-flex e-con e-child\" data-id=\"b67aef9\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d0034c0 elementor-widget elementor-widget-text-editor\" data-id=\"d0034c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tInsecure microflow implementations, such as missing or insufficient authorization, can allow attackers to manipulate application behavior, trigger microflows and execute functionality they should not have access to.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dbf9932 elementor-widget elementor-widget-button\" data-id=\"dbf9932\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-03\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2193\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2193\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-04: Insecure published integrations <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2193\" class=\"elementor-element elementor-element-92d3085 e-con-full e-flex e-con e-child\" data-id=\"92d3085\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-31d5100 elementor-widget elementor-widget-text-editor\" data-id=\"31d5100\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tWeakly secured published integrations can expose sensitive data or functionality to external attackers.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a28ea6e elementor-widget elementor-widget-button\" data-id=\"a28ea6e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-04\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2194\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2194\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-05: Insecure consumption of integrations <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2194\" class=\"elementor-element elementor-element-2952722 e-con-full e-flex e-con e-child\" data-id=\"2952722\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f5f22eb elementor-widget elementor-widget-text-editor\" data-id=\"f5f22eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tInsufficient validation of data from external integrations can allow attackers to manipulate the application through untrusted input.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7aa015 elementor-widget elementor-widget-button\" data-id=\"f7aa015\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-05\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-49d0670 e-con-full e-flex e-con e-child\" data-id=\"49d0670\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[],&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e4c4b64 elementor-widget elementor-widget-n-accordion\" data-id=\"e4c4b64\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;all_collapsed&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2390\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2390\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-06: Use of outdated or end-of-life components <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2390\" class=\"elementor-element elementor-element-d39c2fe e-con-full e-flex e-con e-child\" data-id=\"d39c2fe\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c8ba34a elementor-widget elementor-widget-text-editor\" data-id=\"c8ba34a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tOutdated or unsupported components can expose the application to known vulnerabilities that are no longer patched.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b3a3e4a elementor-widget elementor-widget-button\" data-id=\"b3a3e4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-06\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2391\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2391\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-07: Insecure custom authentication <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2391\" class=\"elementor-element elementor-element-308ebf4 e-con-full e-flex e-con e-child\" data-id=\"308ebf4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c8eedac elementor-widget elementor-widget-text-editor\" data-id=\"c8eedac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tFlaws in custom authentication can allow attackers to bypass login controls or gain access as another user.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0684ec4 elementor-widget elementor-widget-button\" data-id=\"0684ec4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-07\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2392\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2392\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-08: Insecure custom Java <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2392\" class=\"elementor-element elementor-element-d5ab3ea e-con-full e-flex e-con e-child\" data-id=\"d5ab3ea\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f4d0775 elementor-widget elementor-widget-text-editor\" data-id=\"f4d0775\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tInsecure custom Java can introduce vulnerabilities that bypass Mendix\u2019s built-in security controls.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b596615 elementor-widget elementor-widget-button\" data-id=\"b596615\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-08\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2393\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2393\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-09: Insecure UI components <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2393\" class=\"elementor-element elementor-element-1e48c7d e-con-full e-flex e-con e-child\" data-id=\"1e48c7d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-15aee7f elementor-widget elementor-widget-text-editor\" data-id=\"15aee7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tInsecure custom or third-party UI components can introduce client-side vulnerabilities that attackers can exploit.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-13924f7 elementor-widget elementor-widget-button\" data-id=\"13924f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-09\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-2394\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-2394\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> TSU-10: Insecure cloud deployments <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m5.121 15.825a.5.5 0 0 1 .054-.7l6.349-5.442a1.491 1.491 0 0 1 1.952 0l6.349 5.442a.5.5 0 1 1 -.65.76l-6.35-5.443a.5.5 0 0 0 -.651 0l-6.349 5.438a.5.5 0 0 1 -.704-.055z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" id=\"Layer_1\" height=\"24\" viewBox=\"0 0 24 24\" width=\"24\" data-name=\"Layer 1\"><path d=\"m19.88 9.175a.5.5 0 0 1 -.055.7l-6.349 5.443a1.491 1.491 0 0 1 -1.952 0l-6.349-5.439a.5.5 0 1 1 .65-.758l6.35 5.442a.5.5 0 0 0 .65 0l6.35-5.442a.5.5 0 0 1 .705.054z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-2394\" class=\"elementor-element elementor-element-fe42e62 e-con-full e-flex e-con e-child\" data-id=\"fe42e62\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-344e1d1 elementor-widget elementor-widget-text-editor\" data-id=\"344e1d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tMisconfigured cloud deployments can disclose details about the system or make the application more susceptible to attacks.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4918e4d elementor-widget elementor-widget-button\" data-id=\"4918e4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/mendix\/the-s-unit-top-10\/tsu-10\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-long-arrow-alt-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M313.941 216H12c-6.627 0-12 5.373-12 12v56c0 6.627 5.373 12 12 12h301.941v46.059c0 21.382 25.851 32.09 40.971 16.971l86.059-86.059c9.373-9.373 9.373-24.569 0-33.941l-86.059-86.059c-15.119-15.119-40.971-4.411-40.971 16.971V216z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Read more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-01c2dae e-flex e-con-boxed e-con e-parent\" data-id=\"01c2dae\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6b2daa8 e-con-full e-flex e-con e-child\" data-id=\"6b2daa8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fb36c46 elementor-widget elementor-widget-heading\" data-id=\"fb36c46\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQ<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-52aefe3 e-con-full e-flex e-con e-child\" data-id=\"52aefe3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4e06d3c elementor-widget elementor-widget-n-accordion\" data-id=\"4e06d3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-8180\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-8180\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What is the difference between the OWASP Top 10 and The S-Unit Top 10? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-chevron-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M207.029 381.476L12.686 187.132c-9.373-9.373-9.373-24.569 0-33.941l22.667-22.667c9.357-9.357 24.522-9.375 33.901-.04L224 284.505l154.745-154.021c9.379-9.335 24.544-9.317 33.901.04l22.667 22.667c9.373 9.373 9.373 24.569 0 33.941L240.971 381.476c-9.373 9.372-24.569 9.372-33.942 0z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-8180\" class=\"elementor-element elementor-element-d86c54b e-con-full e-flex e-con e-child\" data-id=\"d86c54b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-8180\" class=\"elementor-element elementor-element-97031c8 e-flex e-con-boxed e-con e-child\" data-id=\"97031c8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-217c779 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"217c779\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tThe OWASP Top 10 describes security risks for web applications in general. The S-Unit Top 10 focuses specifically on vulnerabilities we encounter in practice within applications built on the Mendix platform.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-8181\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-8181\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> How can I protect my Mendix application against these vulnerabilities? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-chevron-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M207.029 381.476L12.686 187.132c-9.373-9.373-9.373-24.569 0-33.941l22.667-22.667c9.357-9.357 24.522-9.375 33.901-.04L224 284.505l154.745-154.021c9.379-9.335 24.544-9.317 33.901.04l22.667 22.667c9.373 9.373 9.373 24.569 0 33.941L240.971 381.476c-9.373 9.372-24.569 9.372-33.942 0z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-8181\" class=\"elementor-element elementor-element-c5e4ef7 e-con-full e-flex e-con e-child\" data-id=\"c5e4ef7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-8181\" class=\"elementor-element elementor-element-4cceb5b e-flex e-con-boxed e-con e-child\" data-id=\"4cceb5b\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4ffd6e1 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4ffd6e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tRegular penetration tests and security audits help identify vulnerabilities, while our Mendix-specific SAST solution with Omnext continuously scans for The S-Unit Top 10. Integrated into the CI\/CD pipeline, it catches security risks early and reduces the reliance on manual testing.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is the difference between the OWASP Top 10 and The S-Unit Top 10?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The OWASP Top 10 describes security risks for web applications in general. The S-Unit Top 10 focuses specifically on vulnerabilities we encounter in practice within applications built on the Mendix platform.\"}},{\"@type\":\"Question\",\"name\":\"How can I protect my Mendix application against these vulnerabilities?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Regular penetration tests and security audits help identify vulnerabilities, while our Mendix-specific SAST solution with Omnext continuously scans for The S-Unit Top 10. Integrated into the CI\\\/CD pipeline, it catches security risks early and reduces the reliance on manual testing.\"}}]}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c2f8aac e-flex e-con-boxed e-con e-parent\" data-id=\"c2f8aac\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ab9ce4b elementor-widget elementor-widget-heading\" data-id=\"ab9ce4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Want to know if your Mendix application<br \/> has these vulnerabilities?<\/h2>\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-06d13e7 e-con-full e-flex e-con e-child\" data-id=\"06d13e7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e54b167 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"e54b167\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tWhether you\u2019re facing a specific challenge or want to look at your security from a different angle, we\u2019ll think it through with you and explore where an offensive approach makes the difference.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fd660e1 e-con-full e-flex e-con e-child\" data-id=\"fd660e1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2f34ac2 elementor-widget elementor-widget-button\" data-id=\"2f34ac2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/en\/contact\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Schedule a call<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The S-Unit Mendix Top 10 Inspired by OWASP and shaped by more than 10 years of offensive security experience, The S-Unit Top 10 reveals the Mendix-specific vulnerabilities that can open the door to an attack Based on insights from hundreds of Mendix penetration tests. Check the most common vulnerabilities in Mendix TSU-01: Insecure user roles [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":3541,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2568","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Mendix Top 10: most common vulnerabilities - The S-Unit<\/title>\n<meta name=\"description\" content=\"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mendix Top 10: most common vulnerabilities - The S-Unit\" \/>\n<meta property=\"og:description\" content=\"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/\" \/>\n<meta property=\"og:site_name\" content=\"The S-Unit\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-06T19:52:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/\",\"name\":\"Mendix Top 10: most common vulnerabilities - The S-Unit\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Mendix-Brandmark-RGB.webp\",\"datePublished\":\"2026-10-06T13:37:56+00:00\",\"dateModified\":\"2026-11-06T19:52:17+00:00\",\"description\":\"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/#primaryimage\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Mendix-Brandmark-RGB.webp\",\"contentUrl\":\"https:\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Mendix-Brandmark-RGB.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/the-s-unit-top-10\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mendix Overview\",\"item\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/mendix\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"The S-Unit Top 10\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#website\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/\",\"name\":\"The S-Unit\",\"description\":\"100% Offensive Security\",\"publisher\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/the-s-unit.nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#organization\",\"name\":\"The S-Unit\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/S-Unit-Logo-White.svg\",\"contentUrl\":\"https:\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/S-Unit-Logo-White.svg\",\"width\":281,\"height\":103,\"caption\":\"The S-Unit\"},\"image\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mendix Top 10: most common vulnerabilities - The S-Unit","description":"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/","og_locale":"en_US","og_type":"article","og_title":"Mendix Top 10: most common vulnerabilities - The S-Unit","og_description":"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.","og_url":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/","og_site_name":"The S-Unit","article_modified_time":"2026-11-06T19:52:17+00:00","og_image":[{"url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/","url":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/","name":"Mendix Top 10: most common vulnerabilities - The S-Unit","isPartOf":{"@id":"https:\/\/the-s-unit.nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/#primaryimage"},"image":{"@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/#primaryimage"},"thumbnailUrl":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp","datePublished":"2026-10-06T13:37:56+00:00","dateModified":"2026-11-06T19:52:17+00:00","description":"The 10 most common Mendix vulnerabilities, from insecure user roles to microflows. Inspired by the OWASP Top 10, based on hundreds of pentests.","breadcrumb":{"@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/#primaryimage","url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp","contentUrl":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/Mendix-Brandmark-RGB.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/the-s-unit.nl\/en\/"},{"@type":"ListItem","position":2,"name":"Mendix Overview","item":"https:\/\/the-s-unit.nl\/en\/mendix\/"},{"@type":"ListItem","position":3,"name":"The S-Unit Top 10"}]},{"@type":"WebSite","@id":"https:\/\/the-s-unit.nl\/#website","url":"https:\/\/the-s-unit.nl\/","name":"The S-Unit","description":"100% Offensive Security","publisher":{"@id":"https:\/\/the-s-unit.nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/the-s-unit.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/the-s-unit.nl\/#organization","name":"The S-Unit","url":"https:\/\/the-s-unit.nl\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/the-s-unit.nl\/#\/schema\/logo\/image\/","url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/09\/S-Unit-Logo-White.svg","contentUrl":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/09\/S-Unit-Logo-White.svg","width":281,"height":103,"caption":"The S-Unit"},"image":{"@id":"https:\/\/the-s-unit.nl\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/2568","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/comments?post=2568"}],"version-history":[{"count":15,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/2568\/revisions"}],"predecessor-version":[{"id":3626,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/2568\/revisions\/3626"}],"up":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/3541"}],"wp:attachment":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/media?parent=2568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}