Read the docs

MuleSoft

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

MuleSoft records in CISA KEV

No MuleSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mule Runtime 4 records MEDIUM Api Gateway 2 records MEDIUM Aplkit 1 record MEDIUM Mule Enterprise Management Console 1 record MEDIUM

Records

6 records

TI-2014-07332 CVE-2014-9000 · GHSA-fcxw-jr7h-j53p

Mule Enterprise Management Console (MMC) does not properly restrict access to…

Priority MEDIUM 40

Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows remote authenticated users to gain administrator privileges and execute arbitrary code via a crafted…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.08874 Published 2014-11-20 No fix listed CWE-264
TI-2019-11729 CVE-2019-15630 · GHSA-mwh9-gr45-xvv4

Path traversal in Salesforce Mulesoft

Priority LOW 38

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019,…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02998 Published 2019-08-30 No fix listed CWE-22
Open these records in search →