Lucene search
+L

5 matches found

NVD
NVD
•added 2026/10/26 3:16 p.m.•8 views

CVE-2026-90885

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. XQueryBuilder in camel-saxon, which evaluates expressions for the xquery language and the xquery component,...

7.5CVSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/26 2:47 p.m.•6 views

CVE-2026-90885 Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. XQueryBuilder in camel-saxon, which evaluates expressions for the xquery language and the xquery component,...

7.5CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/26 2:47 p.m.•5 views

EUVD-2026-109959

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. XQueryBuilder in camel-saxon, which evaluates expressions for the xquery language and the xquery component,...

7.5CVSS5.9AI score
SaveExploits0References6
CVE
CVE
•added 2026/10/26 2:47 p.m.•12 views

CVE-2026-90885

The Apache Camel Saxon component (specifically XQueryBuilder ) is vulnerable to an Improper Restriction of XML External Entity Reference (XXE) vulnerability. The root cause is that the component's default Saxon Configuration only enforces whitespace stripping, leaving the XML parser in a state wh...

7.5CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/26 2:47 p.m.•13 views

CVE-2026-90885 Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved

Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. XQueryBuilder in camel-saxon, which evaluates expressions for the xquery language and the xquery component,...

7.5CVSS
SaveExploits0References6
Rows per page
Query Builder