Skip to contentApache Camel vulnerabilities
- apache camelApache is vulnerable to XXE in XSD validation processorCVE-2018-8027Fix available9.8 Critical
- apache camelCamel-castor component in Apache Camel is vulnerable to Java object de-serialisationCVE-2017-12634Fix available9.8 Critical
- apache camelApache Camel camel-hessian component vulnerable to Java object deserializationCVE-2017-12633Fix available9.8 Critical
- apache camelApache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacksCVE-2016-8749Fix availableEPSS 10.6%9.8 Critical
- apache camelApache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.CVE-2017-5643Fix available7.4 High
- apache camelApache Camel's camel-snakeyaml component is vulnerable to Java object de-serializationCVE-2017-3159Fix available9.8 Critical
- apache camelApache Camel can allow remote attackers to execute arbitrary commandsCVE-2015-5348Fix available8.1 High
- apache camelCamel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commandsCVE-2015-5344Fix available9.8 Critical
- apache camelApache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile objectCVE-2015-0264Fix available5.0 Medium
- apache camelApache Camel XML External Entity vulnerabilityCVE-2015-0263Fix available5.0 Medium
- apache camelApache Camel's XSLT component allows remote attackers to execute arbitrary Java methodsCVE-2014-0003Fix available7.5 High
- apache camelApache Camel's XSLT component allows remote attackers to read arbitrary filesCVE-2014-0002Fix availableEPSS 27.4%7.5 High
- apache camelImproper Control of Generation of Code in Apache CamelCVE-2013-4330Fix available6.8 Medium