CVE-2020-11972

🗓️ 14 May 2020 16:26:03Reported by apacheType

Apache Camel RabbitMQ Java deserialization CVE-2020-1197

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Camel's JMX, Apache Camel RabbitMQ and Apache Camel Netty affects IBM Operations Analytics Predictive Insights (CVE-2020-11971, CVE-2020-11972, CVE-2020-11973)	11 Aug 202014:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in Apache Camel shipped with IBM Netcool/OMNIbus Probe DSL Factory Framework	16 Jul 202005:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable to Apache Camel Core vulnerabilities	15 Jun 202006:00	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Camel ( CVE-2019-0188, CVE-2020-11972, CVE-2020-11973)	1 Oct 202012:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
BDU FSTEC	The vulnerability of the RabbitMQ messaging broker’s Java framework and Apache Camel allows a attacker to cause a service failure or execute arbitrary code.	16 Feb 202100:00	–	bdu_fstec
CNVD	Apache Camel RabbitMQ Code Issue Vulnerability	15 May 202000:00	–	cnvd
CVE	CVE-2020-11972	14 May 202016:26	–	cve
EUVD	EUVD-2021-0910	7 Oct 202500:30	–	euvd
Github Security Blog	Deserialization of Untrusted Data in Apache Camel RabbitMQ	21 May 202119:20	–	github

[
  {
    "product": "Apache Camel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2020/05/14/8
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
camel	www.camel.apache.org/security/CVE-2020-11972.html
openwall	www.openwall.com/lists/oss-security/2020/05/14/10

20 Jan 2021 14:42Current

9.5High risk

Vulners AI Score9.5

EPSS0.0692