CVE Daily – Mule Runtime https://cvedaily.com/pages/tags/mulesoft-runtime.html CVE Daily – Mule Runtime en Wed, 03 Jun 2026 21:27:11 +0000 [High] CVE-2021-1630 – XML external entity (XXE) vulnerability affecting certain versions of a Mule run... https://nvd.nist.gov/vuln/detail/CVE-2021-1630 https://nvd.nist.gov/vuln/detail/CVE-2021-1630 Thu, 05 Aug 2021 21:15:10 +0000 High CVE-2021-1630

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.

CVSS: 7.5 · CWE: CWE-611

View on NVD

]]> [Critical] CVE-2021-1628 – MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain... https://nvd.nist.gov/vuln/detail/CVE-2021-1628 https://nvd.nist.gov/vuln/detail/CVE-2021-1628 Fri, 26 Mar 2021 17:15:12 +0000 Critical CVE-2021-1628

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.

CVSS: 9.8 · CWE: CWE-611

View on NVD

]]> [Critical] CVE-2021-1627 – MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certa... https://nvd.nist.gov/vuln/detail/CVE-2021-1627 https://nvd.nist.gov/vuln/detail/CVE-2021-1627 Fri, 26 Mar 2021 17:15:12 +0000 Critical CVE-2021-1627

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. This affects: Mule 3.8.x,3.9.x,4.x runtime released before February 2, 2021.

CVSS: 9.8 · CWE: CWE-918

View on NVD

]]> [Critical] CVE-2021-1626 – MuleSoft is aware of a Remote Code Execution vulnerability affecting certain ver... https://nvd.nist.gov/vuln/detail/CVE-2021-1626 https://nvd.nist.gov/vuln/detail/CVE-2021-1626 Fri, 26 Mar 2021 17:15:12 +0000 Critical CVE-2021-1626

MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Versions affected: Mule 4.1.x and 4.2.x runtime released before February 2, 2021.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2019-15630 – Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in... https://nvd.nist.gov/vuln/detail/CVE-2019-15630 https://nvd.nist.gov/vuln/detail/CVE-2019-15630 Fri, 30 Aug 2019 17:15:11 +0000 High CVE-2019-15630

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process.

CVSS: 7.5 · CWE: CWE-22

View on NVD

]]>