Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.16.0:*:*:*:*:*:*:*

part: a version: 2.16.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499364
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499365
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499367
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499368

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8749 vulnerable 2026-06-08 05:08:14.806237 Details available
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
Published: 2017-03-28T18:00:00.000Z
Updated: 2024-08-06T02:35:00.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5348 vulnerable 2026-06-08 05:06:49.708994 Details available
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-04-15T15:00:00.000Z
Updated: 2024-08-06T06:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5344 vulnerable 2026-06-08 05:06:49.653164 Details available
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-02-03T15:00:00.000Z
Updated: 2024-08-06T06:41:09.552Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.