Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2019-15631

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.

Description

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MuleSoft Mule CE/EE 3.x

  • released before October 31, 2019affected

MuleSoft Mule API Gateway 2.x

  • released before October 31, 2019affected

References