Skip to content

Vendor

org.mule.runtime vulnerabilities

2 published CVES affecting org.mule.runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.mule.runtime alerts

Products

Latest org.mule.runtime CVEs

Newest publication first

  1. CVE-2019-13116 Mulesoft Mule Unsafe Deserialization

    Published
    CriticalCVSS 9.8

    The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections

  2. CVE-2019-15630 Mule modules contain Directory Traversal

    Published
    HighCVSS 7.5

    Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before Au...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.