PT-2020-12475

Name of the Vulnerable Software and Affected Versions Mulesoft APIkit versions prior to 1.3.1 Description The issue allows XXE XML External Entity attacks due to a problem in the validation process, specifically in the RestXmlSchemaValidator.java file. This could potentially affect a large number...

CVE-2020-10991: Improper Restriction of XML External Entity Reference

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java...

MuleSoft Mule CE/EE and API Gateway Remote Code Execution Vulnerability

MuleSoft is a cloud application integration service provider for enterprises. A remote code execution vulnerability exists in MuleSoft Mule CE/EE version 3.x and API Gateway version 2.x released by October 31, 2019. A remote attacker could exploit the vulnerability to execute arbitrary code...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

Remote code execution

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-15631

CVE-2019-15631 is a remote code execution vulnerability affecting MuleSoft Mule CE/EE 3.x and API Gateway 2.x, described as exploitable to run arbitrary code by a remote attacker and linked to releases before 31 October 2019. The connected records consistently identify the affected product family...

CVE-2019-15631: Undefined Security Weakness

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

PT-2019-14308

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.x MuleSoft API Gateway versions 2.x Description A Remote Code Execution issue allows remote attackers to execute arbitrary code. Recommendations For MuleSoft Mule CE/EE versions 3.x, update to a version released...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

Deserialization of untrusted data

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

CVE-2019-13116 affects MuleSoft Mule Community Edition runtime prior to 3.8, where Java deserialization tied to Apache Commons Collections enables remote code execution. Public sources in connected documents identify the underlying issue and confirm the vulnerability class. Remediation details pr...

PT-2019-13135

Name of the Vulnerable Software and Affected Versions MuleSoft Mule Community Edition versions prior to 3.8 MuleSoft Mule runtime engine versions prior to 3.8.0 Description The issue allows remote attackers to execute arbitrary code due to Java Deserialization, related to Apache Commons...

CVE-2019-13116: Deserialization of Untrusted Data

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-15630

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

CVE-2019-15630

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...