Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.camel/camel-xstream@2.10.1
Typemaven
Namespaceorg.apache.camel
Namecamel-xstream
Version2.10.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.15.5
Latest_non_vulnerable_version2.16.1
Affected_by_vulnerabilities
0
url VCID-813c-avht-8qc9
vulnerability_id VCID-813c-avht-8qc9
summary
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
references
0
reference_url http://camel.apache.org/security-advisories.data/CVE-2015-5344.txt.asc
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://camel.apache.org/security-advisories.data/CVE-2015-5344.txt.asc
1
reference_url http://rhn.redhat.com/errata/RHSA-2016-2035.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-2035.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5344.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5344.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5344
reference_id
reference_type
scores
0
value 0.04974
scoring_system epss
scoring_elements 0.89861
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5344
4
reference_url https://github.com/apache/camel
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel
5
reference_url https://github.com/apache/camel/commit/157c0b4a3c8017de432f1c99f83e374e97dc4d36
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/157c0b4a3c8017de432f1c99f83e374e97dc4d36
6
reference_url https://github.com/apache/camel/commit/369d0a6d605055cb843e7962b101e3bbcd113fec
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/369d0a6d605055cb843e7962b101e3bbcd113fec
7
reference_url https://github.com/apache/camel/commit/4491c080cb6c8659fc05441e49307b7d4349aa56
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/4491c080cb6c8659fc05441e49307b7d4349aa56
8
reference_url https://github.com/apache/camel/commit/4cdc6b177ee7391eedc9f0b695c05d56f84b0812
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/4cdc6b177ee7391eedc9f0b695c05d56f84b0812
9
reference_url https://github.com/apache/camel/commit/8386d8f7260143802553bc6dbae2880d6c0bafda
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/8386d8f7260143802553bc6dbae2880d6c0bafda
10
reference_url https://github.com/apache/camel/commit/b7afb3769a38b8e526f8046414d4a71430d77df0
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/b7afb3769a38b8e526f8046414d4a71430d77df0
11
reference_url https://github.com/apache/camel/commit/f07a33c467adb3d37aa8192698caadfee43a17dc
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/camel/commit/f07a33c467adb3d37aa8192698caadfee43a17dc
12
reference_url https://issues.apache.org/jira/browse/CAMEL-9297
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/CAMEL-9297
13
reference_url https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
15
reference_url http://www.securityfocus.com/archive/1/537414/100/0/threaded
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/537414/100/0/threaded
16
reference_url http://www.securityfocus.com/bid/82260
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/82260
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1303609
reference_id 1303609
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1303609
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5344
reference_id CVE-2015-5344
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5344
19
reference_url https://github.com/advisories/GHSA-gv5f-cjw9-5vxg
reference_id GHSA-gv5f-cjw9-5vxg
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-gv5f-cjw9-5vxg
20
reference_url https://access.redhat.com/errata/RHSA-2016:2035
reference_id RHSA-2016:2035
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2035
fixed_packages
0
url pkg:maven/org.apache.camel/camel-xstream@2.15.5
purl pkg:maven/org.apache.camel/camel-xstream@2.15.5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-xstream@2.15.5
1
url pkg:maven/org.apache.camel/camel-xstream@2.16.1
purl pkg:maven/org.apache.camel/camel-xstream@2.16.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-xstream@2.16.1
aliases CVE-2015-5344, GHSA-gv5f-cjw9-5vxg
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-813c-avht-8qc9
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-xstream@2.10.1