Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the JSON-lib library and the camel-xmljson component of the Java framework Apache Camel, which allows attackers to execute an XXE attack

🗓️ 03 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Json library and Camel xmljson are vulnerable to XXE via weak XML external entity limits.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel
24 Jun 202511:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Camel vulnerability (CVE-2019-0188)
20 Dec 201908:47
–ibm
IBM Security Bulletins		Security Bulletin:IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Camel ( CVE-2019-0188, CVE-2020-11972, CVE-2020-11973)
1 Oct 202012:30
–ibm
Circl		CVE-2019-0188
9 Jan 202415:17
–circl
CNVD		Apache Camel XML External Entity Injection Vulnerability
22 May 201900:00
–cnvd
CVE		CVE-2019-0188
28 May 201918:10
–cve
Cvelist		CVE-2019-0188
28 May 201918:10
–cvelist
EUVD		EUVD-2019-0466
7 Oct 202500:30
–euvd
Github Security Blog		XML External Entity injection in Apache Camel
29 May 201918:15
–github
Japan Vulnerability Notes		JVN#71498764: Apache Camel vulnerable to XML external entity injection (XXE)
22 May 201900:00
–jvn
Rows per page
SourceLink
oraclewww.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
oraclewww.oracle.com/security-alerts/cpuoct2019.html
oraclewww.oracle.com/security-alerts/cpujan2021.html
oraclewww.oracle.com/security-alerts/cpujul2020.html
listswww.lists.apache.org/thread.html/00118387610522b107cbdcec5369ddd512b576ff0236a02bfca12f44@%3Cusers.camel.apache.org%3E
listswww.lists.apache.org/thread.html/45349f8bd98c1c13a84beddede18fe79b8619ebab99d90f1fb43d7ab@%3Cdev.tamaya.apache.org%3E
listswww.lists.apache.org/thread.html/61601cda2c5f9832184ea14647b0c0589c94126a460c8eb196be1313@%3Ccommits.tamaya.apache.org%3E
listswww.lists.apache.org/thread.html/63d1cec8541befeb59dbed23a6b227bdcca7674aa234fb43354dac82@%3Ccommits.tamaya.apache.org%3E
listswww.lists.apache.org/thread.html/6fefbd90f7fb4c8412d85ea3e9e97a4b76b47e206f502c73c29dc0b7@%3Ccommits.tamaya.apache.org%3E
listswww.lists.apache.org/thread.html/84ba9b79e801a4148dde73d1969cdae0247d11ff63de7ce11b394dc5@%3Ccommits.tamaya.apache.org%3E
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
24 Feb 2021 00:00Current
CVSS 37.5
CVSS 27.8
EPSS0.00961
Json library vulnerabilityCamel xmljson componentXML external entity limitsRemote exploitation
1