CVE-2020-6937

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-29 · updated 2026-06-17

Description

A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.

Affected products

MuleSoft Mule CE/EE: from 3.8.0 through 3.8.7; from 3.9.0 through 3.9.4; from 4.0.0 through 4.3.0

References

https://help.salesforce.com/articleView?id=000353701&language=en_US&type=1&mode=1
https://help.salesforce.com/articleView?id=000353701&language=en_US&type=1&mode=1

Get alerted when CVE-2020-6937 or the next vulnerability affects your stack