Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

XML External Entity (XXE)

🗓️ 27 May 2019 06:10:35Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

Apache Camel vulnerable to XML External Entity (XXE) attacks due to outdated JSON-lib library

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel
24 Jun 202511:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Camel vulnerability (CVE-2019-0188)
20 Dec 201908:47
–ibm
IBM Security Bulletins		Security Bulletin:IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Camel ( CVE-2019-0188, CVE-2020-11972, CVE-2020-11973)
1 Oct 202012:30
–ibm
Circl		CVE-2019-0188
9 Jan 202415:17
–circl
CNVD		Apache Camel XML External Entity Injection Vulnerability
22 May 201900:00
–cnvd
CVE		CVE-2019-0188
28 May 201918:10
–cve
Cvelist		CVE-2019-0188
28 May 201918:10
–cvelist
EUVD		EUVD-2019-0466
7 Oct 202500:30
–euvd
Github Security Blog		XML External Entity injection in Apache Camel
29 May 201918:15
–github
Japan Vulnerability Notes		JVN#71498764: Apache Camel vulnerable to XML external entity injection (XXE)
22 May 201900:00
–jvn
Rows per page
Vulners
Node
apacheapache-camelRange2.10.0–2.23.2java
OR
apachecamel-xmljsonRange2.10.0–2.23.2java
SourceLink
githubwww.github.com/apache/camel/blob/906031afe839e54c55ac052e6eee0be012e03c29/docs/user-manual/en/security-advisories/CVE-2019-0188.txt.asc
githubwww.github.com/apache/camel/commit/906031afe839e54c55ac052e6eee0be012e03c29
securityfocuswww.securityfocus.com/bid/108422
listswww.lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E
listswww.lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E
listswww.lists.apache.org/thread.html/00118387610522b107cbdcec5369ddd512b576ff0236a02bfca12f44%40%3Cusers.camel.apache.org%3E
listswww.lists.apache.org/thread.html/00118387610522b107cbdcec5369ddd512b576ff0236a02bfca12f44@%3Cusers.camel.apache.org%3E
githubwww.github.com/apache/camel/blob/master/docs/user-manual/en/security-advisories/CVE-2019-0188.txt.asc
oraclewww.oracle.com/security-alerts/cpujan2021.html
oraclewww.oracle.com/security-alerts/cpujul2020.html
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Nov 2023 00:06Current
7.5High risk
Vulners AI Score7.5
CVSS 25
CVSS 3.17.5
EPSS0.00961
xml external entityapache camelxxe attacksjson-lib libraryvulnerable
30