Known vulnerabilities in Apache Camel 2.20.0

Software: Apache Camel
Version: 2.20.0
Software CPE: cpe:2.3:a:apache_foundation:apache_camel:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache Camel version 2.20.0 Apache Camel 2.20.0 is affected by 6 vulnerabilities: 2 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145143 - Improper input validation
CVE-2026-59230
CWE-20 Medium
No
No
4.14.9, 4.18.4, 4.22.0 25.08.2026 SB2026082548
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971
CWE-350 Medium
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more
#VU27955 - Deserialization of Untrusted Data
CVE-2020-11972
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
#VU27954 - Deserialization of Untrusted Data
CVE-2020-11973
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
SB2020102703
SB2020102927
and 1 more
#VU18784 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20433
CWE-611 Medium
No
No
2.24.0 12.06.2019 SB2018122409
SB2019061208
SB2022042586
and 2 more
#VU14164 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-8027
CWE-611 Low
No
No
2.20.4, 2.21.1 01.08.2018 SB2018080116