Vulnerability · Published Aug 5, 2021 · Assigned by Salesforce

CVE-2021-1630

High 7.5

In plain English

A high-severity security flaw in Mulesoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.1%top 34.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.

Affected products (as reported)

Vendor	Product	Versions
n/a	Mulesoft	MuleSoft Mule CE/EE 3.x and 4.x released before June 8, 2021

References

https://help.salesforce.com/articleView?id=000362693&type=1&mode=1 x_refsource_MISC