Known vulnerabilities in Red Hat Camel for Spring Boot - page 4

Vendor: Red Hat Inc.
Software: Red Hat Camel for Spring Boot
Software CPE: cpe:2.3:a:red_hat:red_hat_camel_for_spring_boot:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 150
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Camel for Spring Boot Red Hat Camel for Spring Boot is affected by 150 known vulnerabilities: 23 high, 113 medium, 14 low Critical High Medium Low

Vulnerabilities (150)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 4.8.3 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 23 more
#VU100928 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-51132		 CWE-611 High
No
No
 4.4.4 26.11.2024 SB2024112640
SB2024112661
#VU100927 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-52007		 CWE-611 High
No
No
 4.4.4 26.11.2024 SB2024112640
SB2024112661
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 4.8 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 4.8 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 4.4.0, 4.4.3 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97959 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45294		 CWE-611 High
No
No
 3.20.7, 4.4.0, 4.4.3 02.10.2024 SB2024100240
SB2024100242
SB2024100249
and 2 more
#VU97683 - Allocation of Resources Without Limits or Throttling
CVE-2024-8391		 CWE-770 Medium
No
No
 4.4.0 24.09.2024 SB2024092475
SB2024092527
SB2024100250
and 2 more
#VU97630 - Missing release of memory after effective lifetime
CVE-2024-41172		 CWE-401 Medium
No
No
 4.4.0, 4.4.2 20.09.2024 SB2024091810
SB2024092018
SB2024100250
and 5 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 4.4.0 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97458 - Improper input validation
CVE-2024-32007		 CWE-20 Medium
No
No
 3.20.7, 4.4.0 18.09.2024 SB2024091810
SB2024091815
SB2024100249
and 10 more
#VU97457 - Server-Side Request Forgery (SSRF)
CVE-2024-29736		 CWE-918 Medium
No
No
 3.20.7 18.09.2024 SB2024091810
SB2024100249
SB20241015142
and 6 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Available
No
 4.4.3 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU96900 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7885		 CWE-200 Medium
No
No
 3.20.7, 4.4.2 05.09.2024 SB2024090598
SB2024090599
SB2024092018
and 16 more
#VU96052 - Resource exhaustion
CVE-2024-5971		 CWE-400 Medium
No
No
 3.20.7, 4.4.2 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 4.4.2 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 4.4.3 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-35255		 CWE-362 Low
No
No
 4.4.0 11.06.2024 SB20240611248
SB2024091320
SB2024091965
and 15 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 4.4.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87615 - Resource exhaustion
CVE-2023-52428		 CWE-400 Medium
No
No
 3.20.7, 4.4.3 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more


Showing elements 61 - 80 out of 150