CVE-2021-1627: Salesforce Mule

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. This affects: Mule 3.8.x,3.9.x,4.x runtime released before February 2, 2021.

Affected products

• Salesforce Mule: from 3.8.0, up to and including 4.2.2

Published 2021-03-26. Last modified 2026-06-17.