Vulnerability Details : CVE-2020-6937
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.
Vulnerability category: Denial of service
Products affected by CVE-2020-6937
- Mulesoft » Mule Runtime » Enterprise EditionVersions from including (>=) 4.0.0 and up to, including, (<=) 4.3.0cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:enterprise:*:*:*
- Mulesoft » Mule Runtime » Enterprise EditionVersions from including (>=) 3.9.0 and up to, including, (<=) 3.9.4cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:enterprise:*:*:*
- Mulesoft » Mule Runtime » Community EditionVersions from including (>=) 3.8.0 and up to, including, (<=) 3.8.7cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:community:*:*:*
- Mulesoft » Mule Runtime » Community EditionVersions from including (>=) 3.9.0 and up to, including, (<=) 3.9.4cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:community:*:*:*
- Mulesoft » Mule Runtime » Community EditionVersions from including (>=) 4.0.0 and up to, including, (<=) 4.3.0cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:community:*:*:*
- Mulesoft » Mule Runtime » Enterprise EditionVersions from including (>=) 3.8.0 and up to, including, (<=) 3.8.7cpe:2.3:a:mulesoft:mule_runtime:*:*:*:*:enterprise:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-6937
0.60%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 67 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-6937
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
References for CVE-2020-6937
-
https://help.salesforce.com/articleView?id=000353701&language=en_US&type=1&mode=1
Denial of Service vulnerability affecting Mule runtimes in certain use casesVendor Advisory
Jump to