Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.14.3:*:*:*:*:*:*:*

part: a version: 2.14.3 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499313
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499314
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499316
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499317

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5348 vulnerable 2026-06-08 05:06:49.706111 Details available
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-04-15T15:00:00.000Z
Updated: 2024-08-06T06:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.