Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.14.0:*:*:*:*:*:*:*

part: a version: 2.14.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499295
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499296
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499298
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499300

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5348 vulnerable 2026-06-08 05:06:49.704640 Details available
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-04-15T15:00:00.000Z
Updated: 2024-08-06T06:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0264 vulnerable 2026-06-08 05:06:14.170460 Details available
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.
Published: 2015-06-03T20:00:00.000Z
Updated: 2024-08-06T04:03:10.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0263 vulnerable 2026-06-08 05:06:14.169405 Details available
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
Published: 2015-06-03T20:00:00.000Z
Updated: 2024-08-06T04:03:10.681Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.