1703 matches found
The vulnerability of the Java framework Apache Camel, related to the recovery of unreliable data structures in memory, allows an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the Java framework Apache Camel is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information, execute arbitrary code, or cause service failure...
Command Execution Vulnerability in Fast Camel Accelerator (Windows Client)
Fast Camel Accelerator is a cross-border product of Wenzhou Yuntong Numerical Network Technology Co. The product can facilitate the user to quickly connect to the overseas private network, to meet the user to access the huge amount of information material, targeted acceleration for specific sites...
Security Bulletin:IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Camel ( CVE-2019-0188, CVE-2020-11972, CVE-2020-11973)
Summary IBM Resilient SOAR is using Apache Camel that has known vulnerabilities, as described below. Vulnerability Details CVEID: CVE-2019-0188 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...
camel-ranch.co.il Cross Site Scripting vulnerability OBB-1373004
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - activemq-camel-5.15.9.jar (CVE-2015-5182, CVE-2015-5183, CVE-2015-5184, CVE-2020-1941)
Summary activemq-camel-5.15.9.jar vulnerable to multiple CVEs. Details below. Vulnerability Details CVEID: CVE-2015-5182 DESCRIPTION: Red Hat JBoss A-MQ is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input by the jolokia API. By persuading an...
Security Bulletin: Vulnerabilities in Apache Camel's JMX, Apache Camel RabbitMQ and Apache Camel Netty affects IBM Operations Analytics Predictive Insights (CVE-2020-11971, CVE-2020-11972, CVE-2020-11973)
Summary Apache Camel's JMX, Apache Camel RabbitMQ and Apache Camel Netty are used by IBM Operations Analytics Predictive Insights. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs. See Remediation/Fixes section to apply the recommended fixes. Vulnerability Details...
Server side template injection in Apache Camel
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
GHSA-9VFJ-5G7H-4P24 Server side template injection in Apache Camel
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
Security Bulletin: Multiple vulnerabilities have been identified in Apache Camel shipped with IBM Netcool/OMNIbus Probe DSL Factory Framework
Summary Apache Camel is a dependency component shipped with the IBM Netcool/OMNIbus Probe DSL Factory Framework. Information about the security vulnerabilities affecting Apache Camel has been published. CVE-2020-11971, CVE-2020-11973, CVE-2020-11972 Vulnerability Details CVEID: CVE-2020-11971...
CVE-2020-11994
A flaw was found in camel. Camel's templating components are suseptable to Server-Side Template Injection and arbitrary file disclosure. The highest threat from this vulnerability is to data confidentiality...
Server-Side Template Injection
camel-robotframework is vulnerable to server-side template injection. An attacker is able to inject and execute arbitrary code via server-side templates...
CVE-2020-11994
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
CVE-2020-11994
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
Design/Logic Flaw
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
CVE-2020-11994
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
CVE-2020-11994
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
CVE-2020-11994
CVE-2020-11994 is a Server-Side Template Injection in the Apache Camel templating component used by Oracle Enterprise Manager Cloud Control Base Platform (13.4.0.0), specifically in the Reporting Framework. The vulnerability enables arbitrary file disclosure and high-impact data exposure due to C...
CVE-2020-11994: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Server-Side Template Injection and arbitrary file disclosure on Camel templating components...
PT-2020-5482
Name of the Vulnerable Software and Affected Versions Apache Camel affected versions not specified Description The issue is related to Server-Side Template Injection and arbitrary file disclosure on Camel templating components. It is caused by insufficient cleaning of special elements in the outp...
CVE-2020-11972
A flaw was found in camel up to versions 2.25.1 and 3.x. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as...