Approved changes feed: RSS · Atom

cpe:2.3:a:mulesoft:api_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMulesoft (43b96da2-e079-5996-bb49-76bdc226fd3f)
ProductApi Gateway (39b6b3ac-72b6-597c-8005-89c8ea11a76c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15631 vulnerable 2026-06-08 05:12:57.723018 Details available
CRITICAL (9.8)
Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.
Published: 2019-12-02T01:44:27.000Z
Updated: 2024-08-05T00:56:20.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15630 vulnerable 2026-06-08 05:12:57.720796 Details available
Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process.
Published: 2019-08-30T16:56:14.000Z
Updated: 2024-08-05T00:56:22.135Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.