CVE-2021-1630: Salesforce Mule

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.

Affected products

• Salesforce Mule: from 3.0.0, before 4.3.0 (fixed in 4.3.0)

Published 2021-08-05. Last modified 2026-06-17.