Search for packages
| purl | pkg:maven/org.apache.camel/camel-core@2.13.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2015-5344
|
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-8027
|
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor. |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2015-0264
|
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-3hrc-f439-727g
Aliases: CVE-2015-0263 |
Apache Camel XML External Entity vulnerability XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache … |
Vulnerable |
|
GHSA-mhx2-r3jx-g94c
Aliases: CVE-2015-0264 |
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object Multiple … |
Vulnerable |
|
GHSA-hfg5-xpvw-c9x4
Aliases: CVE-2020-11971 |
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to … |
Vulnerable |
|
GHSA-h896-mx9x-g32g
Aliases: CVE-2019-0188 |
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability … |
Vulnerable |
|
CVE-2015-0263
|
XXE in Apache Camel XML external entity (XXE) vulnerability in the XML converter setup in `converter/jaxp/XmlConverter.java` in this package allows … |
Vulnerable Vulnerable |
|
CVE-2017-5643
|
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE This package is vulnerable against SSRF via … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-0194
|
Path Traversal Apache Camel's File is vulnerable to directory traversal. |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2015-0264
|
XXE in Apache Camel Multiple XML external entity (XXE) vulnerabilities in `builder/xml/XPathBuilder.java` in this package allow remote attackers to read … |
Vulnerable Vulnerable |
|
GHSA-vq9j-jh62-5hmp
Aliases: CVE-2017-5643 |
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. Description: The Validation Component of Apache Camel … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2014-0003
|
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to … | |
|
CVE-2013-4330
|
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language … | |
|
CVE-2014-0002
|
The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and … |