Mulesoft 漏洞

时间轴

类型

Not Defined6
Automation Software4

产品

MuleSoft Mule Community Edition4
MuleSoft Mule Enterprise Edition4
MuleSoft API Gateay4
MuleSoft Mule4
MuleSoft Mule Runtime Engine2

修正

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

访问向量

Not Defined0
Physical0
Local0
Adjacent2
Network8

身份验证

Not Defined0
High0
Low4
None6

用户交互

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤82
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤82
≤94
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤106

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k6
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (7): API Gateay (2), APIkit (1), Mule (4), Mule Community Edition (2), Mule Enterprise Edition (2), Mule Enterprise Management Console (1), Mule Runtime Engine (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2021-08-065.55.5MuleSoft Mule XML External Entity未知Not DefinedNot Defined0.001520.00CVE-2021-1630
2021-03-277.67.3MuleSoft Mule Runtime XML External Entity未知Not DefinedOfficial Fix0.002220.00CVE-2021-1628
2021-03-277.67.3MuleSoft Mule Runtime 权限升级未知Not DefinedOfficial Fix0.002220.00CVE-2021-1627
2021-03-278.07.7MuleSoft Mule Runtime Privilege Escalation未知Not DefinedOfficial Fix0.006500.00CVE-2021-1626
2020-05-296.46.1MuleSoft Mule Community Edition 拒绝服务Automation SoftwareNot DefinedOfficial Fix0.002060.02CVE-2020-6937
2020-03-278.58.5MuleSoft APIkit RestXmlSchemaValidator.java XML External Entity未知Not DefinedNot Defined0.006590.00CVE-2020-10991
2019-12-029.08.9MuleSoft Mule Community Edition 权限升级Automation SoftwareNot DefinedOfficial Fix0.013560.04CVE-2019-15631
2019-10-168.58.4MuleSoft Mule Runtime Engine Apache Commons Collections 权限升级未知Not DefinedOfficial Fix0.036720.02CVE-2019-13116
2014-11-206.36.3Mulesoft Mule Enterprise Management Console 权限升级未知Not DefinedNot Defined0.014070.00CVE-2014-9000

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!