Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0003
HistoryMar 21, 2014 - 12:00 a.m.

CVE-2014-0003

2014-03-2100:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.554 Medium

EPSS

Percentile

97.6%

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before
2.12.3, and possibly earlier versions allows remote attackers to execute
arbitrary Java methods via a crafted message.

Notes

Author Note
mdeslaur apache camel, not activemq

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.554 Medium

EPSS

Percentile

97.6%