GCVE - cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*

part: a version: 2.10.5 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Camel (`ba45c6b1-1e75-5492-855e-5939ebeac8e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/camel`	purl2cpe	2026-06-01 10:14:25.499184
`pkg:docker/apache/camel`	purl2cpe	2026-06-01 10:14:25.499186
`pkg:github/apache/camel`	purl2cpe	2026-06-01 10:14:25.499187
`pkg:maven/org.apache.camel/camel`	purl2cpe	2026-06-01 10:14:25.499188

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-5348`	vulnerable	2026-06-08 05:06:49.695090	Details available Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request. Published: 2016-04-15T15:00:00.000Z Updated: 2024-08-06T06:41:09.342Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/134946/Apache-Camel-Java-Object-Deserialization.html http://rhn.redhat.com/errata/RHSA-2016-2035.html http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc https://issues.apache.org/jira/browse/CAMEL-9309 http://www.securityfocus.com/archive/1/537147/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0003`	vulnerable	2026-06-08 05:05:10.513129	Details available The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message. Published: 2014-03-20T19:00:00.000Z Updated: 2024-08-06T08:58:26.437Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57125 http://rhn.redhat.com/errata/RHSA-2014-0254.html http://rhn.redhat.com/errata/RHSA-2014-0371.html http://www.securityfocus.com/bid/65902 http://secunia.com/advisories/57719	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0002`	vulnerable	2026-06-08 05:05:10.508087	Details available The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Published: 2014-03-20T19:00:00.000Z Updated: 2024-08-06T08:58:26.467Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57125 http://rhn.redhat.com/errata/RHSA-2014-0371.html http://camel.apache.org/security-advisories.data/CVE-2014-0002.txt.asc http://secunia.com/advisories/57719 http://www.securityfocus.com/bid/65901	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4330`	vulnerable	2026-06-08 05:04:35.593696	Details available Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer. Published: 2013-10-04T17:00:00.000Z Updated: 2024-08-06T16:38:02.021Z Open on db.gcve.eu Reference links http://secunia.com/advisories/54888 http://seclists.org/fulldisclosure/2013/Sep/178 http://rhn.redhat.com/errata/RHSA-2013-1862.html https://exchange.xforce.ibmcloud.com/vulnerabilities/87542 http://rhn.redhat.com/errata/RHSA-2014-0140.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.