📦

mule_enterprise_management_console

Vendor: mulesoft

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 8.87% Exploit Prob.
Latest CVE CVE-2014-9000 Nov 20

Security Vulnerability Index

Page 1 / 1
6.5 CVSS
CVE-2014-9000
RCE Exploit Found

Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows remote authenticated users to gain administrator privileges and execute arbitrary code via a crafted request that adds a new user. NOTE: this issue was originally reported for ESB Runtime 3.5.1, but it originates in MMC.

EPSS: 8.87%