Known vulnerabilities in Red Hat Camel for Spring Boot - page 3

Vendor: Red Hat Inc.
Software: Red Hat Camel for Spring Boot
Software CPE: cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 145
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Camel for Spring Boot Red Hat Camel for Spring Boot is affected by 145 known vulnerabilities: 21 high, 110 medium, 14 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 4.10, 4.10.7 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 4.10.6 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 4.10, 4.10.6 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU112166 - Improper Authentication
CVE-2025-49146		 CWE-287 High
No
No
 4.10.3 04.07.2025 SB2025070405
SB2025070406
SB2025070708
and 13 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 4.10.3 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 4.10.3 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU108836 - Resource exhaustion
CVE-2025-1948		 CWE-400 Medium
No
No
 4.10.3 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU106927 - Resource exhaustion
CVE-2025-2240		 CWE-400 Medium
No
No
 4.8, 4.8.5 03.04.2025 SB2025040318
SB2025040326
SB2025040327
and 6 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 4.8, 4.8.5 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 63 more
#VU105881 - Security Features
CVE-2025-22228		 CWE-254 Low
No
No
 4.8.5 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU105455 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-27636		 CWE-644 Medium
Available
No
 4.8, 4.8.5 10.03.2025 SB2025031006
SB2025032409
SB2025040327
and 2 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 4.8.5 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103760 - Improper input validation
CVE-2024-12397		 CWE-20 Medium
No
No
 4.8 11.02.2025 SB2025021123
SB2025021124
SB2025072228
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 4.8.3 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 4.8.3 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 22 more
#VU101805 - Resource Management Errors
CVE-2024-53990		 CWE-399 Low
No
No
 4.8.3 16.12.2024 SB2024121687
SB2025020549
SB2025031225
and 1 more
#VU100928 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-51132		 CWE-611 High
No
No
 4.4.4 26.11.2024 SB2024112640
SB2024112661
#VU100927 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-52007		 CWE-611 High
No
No
 4.4.4 26.11.2024 SB2024112640
SB2024112661
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 4.8 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 4.8 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more


Showing elements 41 - 60 out of 145