Vulnerabilities (CVE)

Filtered by vendor Salesforce Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-1630 1 Salesforce 1 Mule 2021-08-12 5.0 MEDIUM 7.5 HIGH
XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers.
CVE-2017-15010 1 Salesforce 1 Tough-cookie 2019-06-12 5.0 MEDIUM 7.5 HIGH
A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.