Read the docs

Salesforce

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Salesforce records in CISA KEV

No Salesforce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Marketing Cloud Engagement 4 records MEDIUM Mule 4 records MEDIUM Agentforce Vibes 3 records LOW Mulesoft Anypoint Code Builder 3 records LOW Tough-cookie 3 records HIGH Mobile Software Development Kit 1 record MEDIUM Uni2ts 1 record MEDIUM Workbench 1 record LOW

Records

4 records in Mule · all components

TI-2021-01350 CVE-2021-1628 · GHSA-79pr-23xj-fhhq

XML external entity injection in Mulesoft

Priority MEDIUM 45

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01241 Published 2021-03-26 No fix listed CWE-611
TI-2021-01349 CVE-2021-1627 · GHSA-979g-7427-r7wv

Server-side request forgery in Mulesoft

Priority MEDIUM 44

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0108 Published 2021-03-26 No fix listed CWE-918
TI-2021-01352 CVE-2021-1630 · GHSA-xqcp-x2j9-xj7c

XML external entity injection in Mulesoft

Priority LOW 35

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01074 Published 2021-08-05 No fix listed CWE-611
Open these records in search →