CVE-2020-10991: Mulesoft Aplkit

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java

Affected products

• Mulesoft Aplkit: up to and including 1.3.0

Published 2020-03-27. Last modified 2026-06-17.