Known vulnerabilities in Apache Camel - page 2

Software: Apache Camel
Software CPE: cpe:2.3:a:apache_foundation:apache_camel:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Camel Apache Camel is affected by 66 known vulnerabilities: 18 high, 37 medium, 11 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145337 - Deserialization of Untrusted Data
CVE-2026-40048
CWE-502 Low
No
No
4.20.0 25.08.2026 SB20260824128
#VU144721 - Improper input validation
CVE-2026-49042
CWE-20 Medium
No
No
4.18.3, 4.21.0 24.08.2026 SB20260824128
#VU144720 - Improper input validation
CVE-2026-46588
CWE-20 Medium
No
No
4.14.8, 4.18.3, 4.21.0 24.08.2026 SB20260824128
#VU144719 - Improper input validation
CVE-2026-46587
CWE-20 Medium
No
No
4.14.8, 4.18.3, 4.21.0 24.08.2026 SB20260824128
#VU144718 - Deserialization of Untrusted Data
CVE-2026-43867
CWE-502 Medium
No
No
4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144716 - Deserialization of Untrusted Data
CVE-2026-43866
CWE-502 Low
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144713 - Argument Injection or Modification
CVE-2026-40047
CWE-88 Medium
No
No
4.19.0, 4.20.0 24.08.2026 SB20260824128
#VU144712 - Deserialization of Untrusted Data
CVE-2026-40859
CWE-502 High
No
No
4.15.0, 4.19.0, 4.20.0 24.08.2026 SB20260824128
#VU144711 - Deserialization of Untrusted Data
CVE-2026-42527
CWE-502 Medium
No
No
4.14.8, 4.15.0, 4.18.3, 4.19.0, 4.21.0, 4.22.0 24.08.2026 SB20260824128
#VU144710 - Deserialization of Untrusted Data
CVE-2026-43865
CWE-502 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144709 - Authorization Bypass Through User-Controlled Key
CVE-2026-46453
CWE-639 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144707 - Improper input validation
CVE-2026-46454
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144706 - Insufficient Session Expiration
CVE-2026-46455
CWE-613 Medium
No
No
4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144700 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-46591
CWE-89 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144689 - Authorization Bypass Through User-Controlled Key
CVE-2026-49099
CWE-639 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144688 - Information Exposure Through an Error Message
CVE-2026-49365
CWE-209 Medium
No
No
0.0.0.0, 4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144687 - Improper Authentication
CVE-2026-53913
CWE-287 Medium
No
No
4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144686 - Improper input validation
CVE-2026-55993
CWE-20 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144685 - Improper input validation
CVE-2026-55994
CWE-20 Low
No
No
4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144684 - Information Exposure Through an Error Message
CVE-2026-56139
CWE-209 Medium
No
No
0.0.0.0, 4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128


Showing elements 21 - 40 out of 66