Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Salesforce Component: Mule Clear all filters
TI-2021-01352 CVE-2021-1630 · GHSA-xqcp-x2j9-xj7c

XML external entity injection in Mulesoft

Priority LOW 35

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01074 Published 2021-08-05 No fix listed CWE-611
TI-2021-01350 CVE-2021-1628 · GHSA-79pr-23xj-fhhq

XML external entity injection in Mulesoft

Priority MEDIUM 45

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01241 Published 2021-03-26 No fix listed CWE-611
TI-2021-01349 CVE-2021-1627 · GHSA-979g-7427-r7wv

Server-side request forgery in Mulesoft

Priority MEDIUM 44

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0108 Published 2021-03-26 No fix listed CWE-918