Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.14.1:*:*:*:*:*:*:*

part: a version: 2.14.1 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499301
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499303
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499304
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5348 vulnerable 2026-06-08 05:06:49.705099 Details available
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-04-15T15:00:00.000Z
Updated: 2024-08-06T06:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0264 vulnerable 2026-06-08 05:06:14.170479 Details available
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.
Published: 2015-06-03T20:00:00.000Z
Updated: 2024-08-06T04:03:10.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0263 vulnerable 2026-06-08 05:06:14.169938 Details available
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
Published: 2015-06-03T20:00:00.000Z
Updated: 2024-08-06T04:03:10.681Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.