| CVE-2026-40859 |
Deserialization of Untrusted Data vulnerability in Apache Camel
|
Non notée
|
6 juil. 2026 |
| CVE-2026-40047 |
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Camel Docling…
|
Non notée
|
6 juil. 2026 |
| CVE-2026-47323 |
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative…
|
Non notée
|
19 mai 2026 |
| CVE-2026-27172 |
The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner…
|
Non notée
|
27 avr. 2026 |
| CVE-2026-33453 |
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel…
|
Non notée
|
27 avr. 2026 |
| CVE-2026-33454 |
The Camel-Mail component is vulnerable to Camel message header injection
|
Non notée
|
27 avr. 2026 |
| CVE-2026-40858 |
The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote…
|
Non notée
|
27 avr. 2026 |
| CVE-2026-40860 |
JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the…
|
Non notée
|
27 avr. 2026 |
| CVE-2026-23552 |
Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak…
|
Non notée
|
23 févr. 2026 |
| CVE-2025-30177 |
Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions
|
Non notée
|
1 avr. 2025 |
| CVE-2025-29891 |
Bypass/Injection vulnerability in Apache Camel
|
Non notée
|
12 mars 2025 |
| CVE-2025-27636 |
Bypass/Injection vulnerability in Apache Camel components under particular conditions
|
Non notée
|
9 mars 2025 |
| CVE-2024-22371 |
Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that…
|
2.9
Faible
|
26 févr. 2024 |
| CVE-2024-23114 |
Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is…
|
Non notée
|
20 févr. 2024 |
| CVE-2024-22369 |
Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0…
|
Non notée
|
20 févr. 2024 |
| CVE-2018-8041 |
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal
|
Non notée
|
17 sept. 2018 |
| CVE-2018-8027 |
Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor
|
Non notée
|
31 juil. 2018 |
| CVE-2017-12634 |
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object…
|
Non notée
|
15 nov. 2017 |
| CVE-2017-12633 |
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object…
|
Non notée
|
15 nov. 2017 |
| CVE-2016-8749 |
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
|
Non notée
|
28 mars 2017 |
| CVE-2017-5643 |
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE
|
Non notée
|
16 mars 2017 |
| CVE-2017-3159 |
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability
|
Non notée
|
7 mars 2017 |