CVE-2021-1628

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Mar 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-16296.1Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.CVE-2021-16307.5XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime FCVE-2021-16368.8Microsoft SQL Elevation of Privilege VulnerabilityCVE-2021-16375.5Windows DNS Query Information Disclosure VulnerabilityCVE-2021-16387.7Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerabCVE-2021-16397.0Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-16407.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-16414.6Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-16427.8Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityCVE-2021-16437.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-16447.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-16455.0Windows Docker Information Disclosure Vulnerability
CVE-2021-1628: Critical severity, CVSS 9.8 | Vulnix