CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2018/10/16 11:9 p.m.•7 views

GHSA-MHX2-R3JX-G94C Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object

Multiple XML external entity XXE vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML 1 String or 2 GenericFile object in an XPath query...

5CVSS7.3AI score0.07088EPSS

Exploits0References14

NVD•added 2015/06/03 8:59 p.m.•23 views

CVE-2015-0264

5CVSS9.6AI score0.07088EPSS

Exploits0References8

CVE•added 2015/06/03 8:0 p.m.•95 views

CVE-2015-0264

CVE-2015-0264: In Apache Camel, multiple XXE vulnerabilities exist in builder/xml/XPathBuilder.java that allow reading arbitrary files when processing invalid XML strings or GenericFile objects via an XML External Entity (XXE) declaration. Affected versions are Camel before 2.13.4 and 2.14.x befo...

5CVSS9.3AI score0.07088EPSS

Exploits0References8Affected Software1