Skip to content
OpenAdvisories

Package · Maven

org.mule.runtime:mule

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2019-13116

    Mulesoft Mule Unsafe Deserialization

    The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections

    org.mule.runtime:mule Maven
  • High 7.5
    CVE-2019-15630

    Mule modules contain Directory Traversal

    Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gatew…

    Salesforce Mulesoft API Gateway Mulesoft org.mule.runtime:mule Maven