Known vulnerabilities in Apache Camel - page 3

Software: Apache Camel
Software CPE: cpe:2.3:a:apache_foundation:apache_camel:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Camel Apache Camel is affected by 66 known vulnerabilities: 18 high, 37 medium, 11 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144701 - Deserialization of Untrusted Data
CVE-2026-46590
CWE-502 Medium
No
No
4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144699 - Improper input validation
CVE-2026-46592
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144698 - Improper input validation
CVE-2026-46726
CWE-20 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144697 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-48203
CWE-74 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144696 - Improper Access Control
CVE-2026-48204
CWE-284 High
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144695 - Improper input validation
CVE-2026-48205
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144693 - Authorization Bypass Through User-Controlled Key
CVE-2026-48206
CWE-639 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144692 - Improper input validation
CVE-2026-49086
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144691 - Improper input validation
CVE-2026-49097
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU144690 - Improper input validation
CVE-2026-49098
CWE-20 Medium
No
No
4.15.0, 4.19.0, 4.21.0 24.08.2026 SB20260824128
#VU121613 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-66169
CWE-94 Medium
No
No
4.10.8, 4.14.3, 4.17.0 16.01.2026 SB2026011617
#VU106967 - Improper input validation
CVE-2025-30177
CWE-20 Low
No
No
4.8.6, 4.10.3 03.04.2025 SB2025040397
#VU106090 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-29891
CWE-644 Medium
No
No
3.22.4, 4.8.5, 4.10.2 27.03.2025 SB2025032714
#VU105455 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-27636
CWE-644 Medium
Available
No
3.22.4, 4.8.5, 4.10.2 10.03.2025 SB2025031006
SB2025032409
SB2025040327
and 2 more
#VU86861 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22371
CWE-200 Low
No
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 27.02.2024 SB2024022034
SB2024032819
SB2024061872
and 4 more
#VU86627 - Deserialization of Untrusted Data
CVE-2024-23114
CWE-502 High
No
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 20.02.2024 SB2024022034
SB2024032819
SB2024102372
#VU86626 - Deserialization of Untrusted Data
CVE-2024-22369
CWE-502 High
Available
No
3.21.4, 3.22.1, 4.0.4, 4.4.0 20.02.2024 SB2024022034
SB2024032819
#VU69912 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-45046
CWE-90 High
No
No
3.14.6, 3.18.4 05.12.2022 SB2022120548
SB2023101705
#VU27955 - Deserialization of Untrusted Data
CVE-2020-11972
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
#VU27954 - Deserialization of Untrusted Data
CVE-2020-11973
CWE-502 High
No
No
2.25.1, 3.2.0 17.05.2020 SB2020051702
SB2020102703
SB2020102927
and 1 more


Showing elements 41 - 60 out of 66