Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.camel/camel-core@2.14.1
purl pkg:maven/org.apache.camel/camel-core@2.14.1
Next non-vulnerable version 3.21.4
Latest non-vulnerable version 4.4.0
Risk score 3.4
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
GHSA-3hrc-f439-727g
Aliases:
CVE-2015-0263
Apache Camel XML External Entity vulnerability XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache …
2.14.2
Vulnerable
GHSA-mhx2-r3jx-g94c
Aliases:
CVE-2015-0264
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object Multiple …
2.14.2
Vulnerable
GHSA-hfg5-xpvw-c9x4
Aliases:
CVE-2020-11971
Improper Input Validation in Apache Camel Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to …
3.2.0
Vulnerable
GHSA-h896-mx9x-g32g
Aliases:
CVE-2019-0188
XML External Entity injection in Apache Camel Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability …
2.24.0
Vulnerable
CVE-2015-0263

XXE in Apache Camel XML external entity (XXE) vulnerability in the XML converter setup in `converter/jaxp/XmlConverter.java` in this package allows …
2.13.4
Vulnerable
2.14.2
Vulnerable
CVE-2017-5643

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE This package is vulnerable against SSRF via …
2.18.3
Vulnerable
2.17.6
Vulnerable
2.19.0
Vulnerable
CVE-2019-0194

Path Traversal Apache Camel's File is vulnerable to directory traversal.
2.19.1
Vulnerable
2.23.1
Vulnerable
2.22.3
Vulnerable
2.21.4
Vulnerable
CVE-2015-0264

XXE in Apache Camel Multiple XML external entity (XXE) vulnerabilities in `builder/xml/XPathBuilder.java` in this package allow remote attackers to read …
2.13.4
Vulnerable
2.14.2
Vulnerable
GHSA-vq9j-jh62-5hmp
Aliases:
CVE-2017-5643
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. Description: The Validation Component of Apache Camel …
2.17.6
Vulnerable
2.17.6
Vulnerable
This package is not known to fix any advisories.