CVE-2019-15631

CRITICAL 9.8CVE-2019-15631 · Published 02/12/2019 · updated 17/06/2026

In short

CVE-2019-15631 is a CRITICAL (CVSS 9.8) vulnerability affecting api gateway (mulesoft), mule runtime (mulesoft).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
api gateway mulesoft	`≥ 2.0.0, ≤ 2.2.12`	No fix yet
mule runtime mulesoft	`≥ 3.0.0, ≤ 3.9.3`	No fix yet

Description

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.

References

help.salesforce.com/articleView · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free