Vulnerabilities > Apache > Camel

DATE CVE VULNERABILITY TITLE RISK
2023-07-10 CVE-2023-34442 Unspecified vulnerability in Apache Camel
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through <=3.14.8, from 3.18.X through <=3.18.7, from 3.20.X through <= 3.20.5, from 4.X through <= 4.0.0-M3. Users should upgrade to 3.14.9, 3.18.8, 3.20.6 or 3.21.0 and for users on Camel 4.x update to 4.0.0-M1
local
low complexity
apache
3.3
2020-07-08 CVE-2020-11994 Injection vulnerability in multiple products
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
network
low complexity
apache oracle CWE-74
7.5
2020-05-14 CVE-2020-11973 Deserialization of Untrusted Data vulnerability in multiple products
Apache Camel Netty enables Java deserialization by default.
network
low complexity
apache oracle CWE-502
critical
9.8
2020-05-14 CVE-2020-11972 Deserialization of Untrusted Data vulnerability in multiple products
Apache Camel RabbitMQ enables Java deserialization by default.
network
low complexity
apache oracle CWE-502
7.5
2020-05-14 CVE-2020-11971 Apache Camel's JMX is vulnerable to Rebind Flaw.
network
low complexity
apache oracle
7.5
2020-02-11 CVE-2020-5529 Improper Initialization vulnerability in multiple products
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities.
network
high complexity
htmlunit debian canonical apache CWE-665
8.1
2019-05-28 CVE-2019-0188 XXE vulnerability in multiple products
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library.
network
low complexity
oracle apache CWE-611
7.5
2019-04-30 CVE-2019-0194 Path Traversal vulnerability in Apache Camel
Apache Camel's File is vulnerable to directory traversal.
network
low complexity
apache CWE-22
7.5
2018-09-17 CVE-2018-8041 Path Traversal vulnerability in Apache Camel
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.
network
low complexity
apache CWE-22
5.3
2018-07-31 CVE-2018-8027 XXE vulnerability in Apache Camel
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
network
low complexity
apache CWE-611
critical
9.8