CVE-2020-6937

A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion...

Denial of service

A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion...

CVE-2020-6937

A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion...

CVE-2020-6937

CVE-2020-6937 is a Denial of Service vulnerability affecting MuleSoft Mule CE/EE (Community and Enterprise Editions) versions 3.8.x, 3.9.x, and 4.x released before 7 Apr 2020. The issue allows remote attackers to submit data, causing resource exhaustion. Public references in NVD describe the vuln...

CVE-2020-10991

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

CVE-2020-10991

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

Input validation

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

Mulesoft APIkit Code Issue Vulnerability

MuleSoft APIkit is a tool for building REST APIs using the MULE runtime from MuleSoft USA. A code issue vulnerability exists in Mulesoft APIkit version 1.3.0 and earlier. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product...

CVE-2020-10991

CVE-2020-10991 affects MuleSoft APIkit up to version 1.3.0. The vulnerability is an XML External Entity (XXE) issue caused by validation logic in RestXmlSchemaValidator.java, enabling external entity processing during XML parsing. Impact is described as high (per CVSS v3.1: 9.8, Network attack ve...

CVE-2020-10991

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

MuleSoft Mule CE/EE and API Gateway Remote Code Execution Vulnerability

MuleSoft is a cloud application integration service provider for enterprises. A remote code execution vulnerability exists in MuleSoft Mule CE/EE version 3.x and API Gateway version 2.x released by October 31, 2019. A remote attacker could exploit the vulnerability to execute arbitrary code...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

Remote code execution

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-15631

CVE-2019-15631 is a remote code execution vulnerability affecting MuleSoft Mule CE/EE 3.x and API Gateway 2.x, described as exploitable to run arbitrary code by a remote attacker and linked to releases before 31 October 2019. The connected records consistently identify the affected product family...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

Deserialization of untrusted data

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...