CVE-2020-6937: Mulesoft Mule Runtime

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.

Affected products

• Mulesoft Mule Runtime: from 3.8.0, up to and including 3.8.7; from 3.9.0, up to and including 3.9.4; from 4.0.0, up to and including 4.3.0

Published 2020-05-29. Last modified 2026-06-17.