Known vulnerabilities in Apache Camel

Software: Apache Camel
Software CPE: cpe:2.3:a:apache_foundation:apache_camel:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Camel Apache Camel is affected by 16 known vulnerabilities: 5 high, 8 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121613 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-66169
CWE-94 Medium
No
No
4.10.8, 4.14.3, 4.17.0 16.01.2026 SB2026011617
#VU111924 - Server-Side Request Forgery (SSRF)
CVE-2017-5643
CWE-918 Medium
No
No
2.17.6, 2.18.3 25.06.2025 SB2017031635
SB2025062602
#VU106967 - Improper input validation
CVE-2025-30177
CWE-20 Low
No
No
4.8.6, 4.10.3 03.04.2025 SB2025040397
#VU106090 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-29891
CWE-644 Medium
No
No
3.22.4, 4.8.5, 4.10.2 27.03.2025 SB2025032714
#VU105455 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-27636
CWE-644 Medium
Available
No
3.22.4, 4.8.5, 4.10.2 10.03.2025 SB2025031006
SB2025032409
SB2025040327
and 2 more
#VU86861 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22371
CWE-200 Low
No
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 27.02.2024 SB2024022034
SB2024032819
SB2024061872
and 4 more
#VU86627 - Deserialization of Untrusted Data
CVE-2024-23114
CWE-502 High
No
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 20.02.2024 SB2024022034
SB2024032819
SB2024102372
#VU86626 - Deserialization of Untrusted Data
CVE-2024-22369
CWE-502 High
Available
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 20.02.2024 SB2024022034
SB2024032819
#VU69912 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-45046
CWE-90 High
No
No
3.14.6, 3.18.4 05.12.2022 SB2022120548
SB2023101705
#VU27956 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2020-11971
CWE-350 Medium
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
SB2022042254
SB2022100521
and 5 more
#VU27955 - Deserialization of Untrusted Data
CVE-2020-11972
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
#VU27954 - Deserialization of Untrusted Data
CVE-2020-11973
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
SB2020102703
SB2020102927
and 1 more
#VU18786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-0194
CWE-22 Medium
No
No
2.21.5, 2.22.3, 2.23.1 12.06.2019 SB2019050307
#VU18784 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20433
CWE-611 Medium
No
No
2.24.0 12.06.2019 SB2018122409
SB2019061208
SB2022042586
and 2 more
#VU18570 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0188
CWE-611 Medium
No
No
2.24.0 22.05.2019 SB2019052202
SB2019101556
SB2020071664
and 1 more
#VU14164 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-8027
CWE-611 Low
No
No
2.20.4, 2.21.1 01.08.2018 SB2018080116