CVE-2016-8749

2017-03-2818:00:00

apache

www.cve.org

9.8 High

AI Score

Confidence

High

0.099 Low

EPSS

Percentile

94.9%

JSON

Apache Camel’s Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

CNA Affected

[
  {
    "product": "Apache Camel",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.16.0 to 2.16.4"
      },
      {
        "status": "affected",
        "version": "2.17.0 to 2.17.4"
      },
      {
        "status": "affected",
        "version": "2.18.0 to 2.18.1"
      },
      {
        "status": "affected",
        "version": "The unsupported Camel 2.x (2.14 and earlier) versions may be also affected."
      }
    ]
  }
]