CVE-2021-1627

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. This affects: Mule 3.8.x,3.9.x,4.x runtime released before February 2, 2021.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Mar 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-16289.8MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both C CVE-2021-16296.1Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.CVE-2021-16307.5XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime F CVE-2021-16368.8Microsoft SQL Elevation of Privilege Vulnerability CVE-2021-16375.5Windows DNS Query Information Disclosure Vulnerability CVE-2021-16387.7Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerab CVE-2021-16397.0Visual Studio Code Remote Code Execution Vulnerability CVE-2021-16407.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2021-16414.6Microsoft SharePoint Server Spoofing Vulnerability CVE-2021-16427.8Windows AppX Deployment Extensions Elevation of Privilege Vulnerability CVE-2021-16437.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2021-16447.8HEVC Video Extensions Remote Code Execution Vulnerability