Known vulnerabilities in Red Hat Camel for Spring Boot - page 2

Vendor: Red Hat Inc.
Software: Red Hat Camel for Spring Boot
Software CPE: cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 145
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Camel for Spring Boot Red Hat Camel for Spring Boot is affected by 145 known vulnerabilities: 21 high, 110 medium, 14 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144038 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1002		 CWE-444 Low
No
No
 4.14, 4.14.4 18.08.2026 SB2026081830
SB2026081831
SB2026081835
and 2 more
#VU137476 - Inefficient Regular Expression Complexity
CVE-2026-55470		 CWE-1333 Medium
No
No
 4.18 14.07.2026 SB2026071459
SB2026082587
#VU132273 - Incorrect Calculation
CVE-2025-14813		 CWE-682 Medium
No
No
 4.14 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 17 more
#VU132262 - Resource exhaustion
CVE-2026-3505		 CWE-400 Medium
No
No
 4.14 25.05.2026 SB2026052529
SB2026052531
SB2026052542
and 3 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 4.14 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 13 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588		 CWE-327 Medium
No
No
 4.14 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 15 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 4.14 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU129871 - Improper Access Control
CVE-2026-39852		 CWE-284 High
No
No
 4.14 05.05.2026 SB2026050573
SB2026050719
SB2026052540
and 2 more
#VU126752 - Improper input validation
CVE-2026-27727		 CWE-20 High
No
No
 4.14.4 22.04.2026 SB20260422128
SB20260422169
SB20260422170
and 7 more
#VU126753 - Deserialization of Untrusted Data
CVE-2026-27830		 CWE-502 Medium
No
No
 4.14.4 22.04.2026 SB20260422128
SB20260422168
SB20260422170
and 8 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 4.14 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 15 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 4.14 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543		 CWE-644 Medium
No
No
 4.14.4 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 9 more
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 4.10, 4.14, 4.14.2 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU118734 - Resource exhaustion
CVE-2025-9784		 CWE-400 Medium
No
No
 4.14.2 24.11.2025 SB2024121157
SB2025121162
SB2026021723
and 3 more
#VU117707 - Improper input validation
CVE-2025-59952		 CWE-20 Low
No
No
 4.10.7, 4.14 28.10.2025 SB2025102859
SB2025102861
SB2025102863
and 2 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 4.10.7 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 4.10.7 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 4.14.2 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949		 CWE-611 High
No
No
 4.10.7 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more


Showing elements 21 - 40 out of 145