PT-2019-14308 · Mulesoft · Mule Ce/Ee+1

Published 2019-12-02 · Updated 2019-12-13 · CVE-2019-15631

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.x MuleSoft API Gateway versions 2.x

Description A Remote Code Execution issue allows remote attackers to execute arbitrary code.

Recommendations For MuleSoft Mule CE/EE versions 3.x, update to a version released after October 31, 2019. For MuleSoft API Gateway versions 2.x, update to a version released after October 31, 2019.

Fix

Related Identifiers

CVE-2019-15631

Affected Products

Apigateway

Mule Ce/Ee

References · 3

• https://osv.dev/vulnerability/CVE-2019-15631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15631 · Security Note
• https://help.salesforce.com/articleView?id=000351827&language=en_US&type=1&mode=1 · Note