Skip to contentApache Software Foundation Camel vulnerabilities
- apache camel, apache software foundation camel platform http main, red hat openshift serverless +7 more +9 moreApache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtimeCVE-2026-40022Public exploitFix available8.2 High
- apache camel, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +4 more +6 moreApache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation RepositoryCVE-2026-40858Public exploitFix available8.8 High
- apache camel, apache software foundation camel coap, camel google pubsub +10 more +12 moreApache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows ca…CVE-2026-40453Public exploitFix available9.9 Critical
- apache camel, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +4 more +6 moreApache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqpCVE-2026-40860Public exploitFix available9.8 Critical
- apache camel, apache software foundation camel pqc, red hat build of apache camel for spring boot 4 +2 moreApache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManagerCVE-2026-40048Public exploitFix available7.8 High
- apache camel, apache software foundation camel mina, red hat build of apache camel for spring boot 4 +1 more +3 moreApache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDPCVE-2026-40473Public exploitFix available8.8 High
- apache camel, apache software foundation camel leveldb, red hat build of apache camel for spring boot 4 +3 more +5 moreApache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDBCVE-2026-25747Public exploitFix available8.8 High
- apache camelApache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicyCVE-2026-23552Public exploitFix available9.1 Critical
- apache camel, apache software foundation camel neo4j +1 moreApache Camel Neo4j: Cypher injection vulnerability in Camel-Neo4j componentCVE-2025-66169Fix available5.3 Medium
- apache camelApache Camel: Camel-Undertow Message Header Injection via Improper FilteringCVE-2025-30177Fix available6.5 Medium
- apache camelApache Camel: Camel Message Header Injection through request parametersCVE-2025-29891Fix availableEPSS 76.1%4.8 Medium
- apache camelApache Camel: Camel Message Header Injection via Improper FilteringCVE-2025-27636Public exploitFix availableEPSS 97.1%5.6 Medium
- apache camelApache Camel issue on ExchangeCreatedEventCVE-2024-22371Public exploitFix available2.9 Low
- apache camelApache Camel: Camel-CassandraQL: Unsafe Deserialization from CassandraAggregationRepositoryCVE-2024-23114Fix available9.8 Critical
- apache camelApache Camel: Camel-SQL: Unsafe Deserialization from JDBCAggregationRepositoryCVE-2024-22369Public exploitFix available7.8 High
- apache camel, apache software foundation camel jira +1 moreApache Camel JIRA: Temporary file information disclosure in Camel-JiraCVE-2023-34442Fix available3.3 Low
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreServer side template injection in Apache CamelCVE-2020-11994Fix available7.5 High
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreDeserialization of Untrusted Data in Apache Camel RabbitMQCVE-2020-11972Fix available9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreApache Camel Netty enables Java deserialization by defaultCVE-2020-11973Fix available9.8 Critical
- apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 moreImproper Input Validation in Apache CamelCVE-2020-11971Fix availableEPSS 14.0%7.5 High
- apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 moreXML External Entity injection in Apache CamelCVE-2019-0188Fix available7.5 High
- apache camelPath Traversal in Apache CamelCVE-2019-0194Fix available7.5 High
- apache camelApache Camel's Mail is vulnerable to path traversalCVE-2018-8041Public exploitFix available5.3 Medium
- apache camelApache is vulnerable to XXE in XSD validation processorCVE-2018-8027Fix available9.8 Critical
- apache camelCamel-castor component in Apache Camel is vulnerable to Java object de-serialisationCVE-2017-12634Fix available9.8 Critical
- apache camelApache Camel camel-hessian component vulnerable to Java object deserializationCVE-2017-12633Fix available9.8 Critical
- apache camelApache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacksCVE-2016-8749Fix availableEPSS 10.6%9.8 Critical
- apache camelApache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.CVE-2017-5643Fix available7.4 High
- apache camelApache Camel's camel-snakeyaml component is vulnerable to Java object de-serializationCVE-2017-3159Fix available9.8 Critical