- How many CVEs does MuleSoft have?
- MuleSoft has 10 published CVE records since 2014, including 0 in the last two years.
- How many MuleSoft CVEs are in CISA KEV?
- None of MuleSoft's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which MuleSoft products have the most CVEs?
- The MuleSoft products with the most published CVEs are mule, mule runtime, api gateway, org.mule.runtime:mule, Mule API Gateway 2.x.
- What are the most common weakness types in MuleSoft CVEs?
- MuleSoft's CVEs most often map to these CWE weakness types: CWE-611 (Improper Restriction of XML External Entity Reference), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-264, CWE-502 (Deserialization of Untrusted Data).
- Are there public exploits for MuleSoft vulnerabilities?
- Yes — 3 of MuleSoft's CVEs have a known public exploit.
- How many critical MuleSoft vulnerabilities are there?
- MuleSoft has 6 critical and 3 high-severity CVEs.
- What is the average severity of MuleSoft CVEs?
- The average CVSS base score across MuleSoft's scored CVEs is 8.8.