CVE-2021-1628: Salesforce Mule

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021.

Affected products

• Salesforce Mule: from 4.0.0, up to and including 4.2.2

Published 2021-03-26. Last modified 2026-06-17.