EUVD-2022-3636

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

MuleSoft Community Edition allows remote code execution due to Java Deserialization vulnerability.

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in Apache Commons Collections	18 Oct 202401:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Commons Collections, Apache Synapse, Oracle WebLogic Server, MuleSoft and Red Hat JBoss might affect IBM Storage Copy Data Management.	24 Jan 202519:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Apache common collections (commons-collections-3.2.jar) have affected APM WebSphere Application Server Agent	17 Jul 202306:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Commons, IBM Operations Analytics - Log Analysis is affected by Improper Handling of Untrusted Input During Deserialization	9 Oct 202506:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution due to use of Apache Commons Collections (multiple vulnerabilities)	22 Nov 202216:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Commons Collections affect IBM InfoSphere Information Server	14 Oct 202222:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Navigator uses Apache Commons Collections resulting in multiple CVEs	1 Apr 202606:28	–	ibm
ATTACKERKB	CVE-2019-13116	16 Oct 201920:15	–	attackerkb

[
  {
    "enisaIdVendor": [
      {
        "id": "aac5503e-ba7a-3118-80c8-0b26ce637883",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4c0f7542-2d87-30be-a72a-8167caa519fb",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-13116
docs	www.docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes
github	www.github.com/mulesoft/mule
threat	www.threat.tevora.com/mulesoft-3-8-unauthenticated-rce
threat	www.threat.tevora.com/mulesoft-3-8-unauthenticated-rce/

03 Oct 2025 20:07Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 27.5

EPSS0.02389