Read the docs

MuleSoft

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

MuleSoft records in CISA KEV

No MuleSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Mule Enterprise Management Console · all components

Priority MEDIUM 40

Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows remote authenticated users to gain administrator privileges and execute arbitrary code via a crafted…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.08874 Published 2014-11-20 No fix listed CWE-264
Open these records in search →