Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:1.6.3:*:*:*:*:*:*:*

part: a version: 1.6.3 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499082
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499083
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499085
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499086

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0003 vulnerable 2026-06-08 05:05:10.512929 Details available
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-08-06T08:58:26.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0002 vulnerable 2026-06-08 05:05:10.501632 Details available
The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-08-06T08:58:26.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4330 vulnerable 2026-06-08 05:04:35.548236 Details available
Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.
Published: 2013-10-04T17:00:00.000Z
Updated: 2024-08-06T16:38:02.021Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.