Approved changes feed: RSS · Atom

cpe:2.3:a:apache:camel:2.12.2:*:*:*:*:*:*:*

part: a version: 2.12.2 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCamel (ba45c6b1-1e75-5492-855e-5939ebeac8e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/camel purl2cpe 2026-06-01 10:14:25.499242
pkg:docker/apache/camel purl2cpe 2026-06-01 10:14:25.499243
pkg:github/apache/camel purl2cpe 2026-06-01 10:14:25.499245
pkg:maven/org.apache.camel/camel purl2cpe 2026-06-01 10:14:25.499246

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5348 vulnerable 2026-06-08 05:06:49.700213 Details available
Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published: 2016-04-15T15:00:00.000Z
Updated: 2024-08-06T06:41:09.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0003 vulnerable 2026-06-08 05:05:10.513266 Details available
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-08-06T08:58:26.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0002 vulnerable 2026-06-08 05:05:10.512008 Details available
The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-03-20T19:00:00.000Z
Updated: 2024-08-06T08:58:26.467Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.