Priority LOW 26
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling component.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01 · Published 2026-10-26 · Partial fix · 4.18.5, 4.22.2 CWE-22
Priority LOW 26
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling component.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01 · Published 2026-10-26 · Partial fix · 4.18.5, 4.22.2 CWE-22
Priority LOW 30
Insufficient Session Expiration vulnerability in Apache Camel Keycloak component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00757 · Published 2026-10-26 · Fixed in 4.18.5, 4.22.2 CWE-613
Priority LOW 26
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache Camel AWS2-s3 component.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00836 · Published 2026-10-26 · Partial fix · 4.18.5, 4.22.2 CWE-917
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0056 · Published 2026-10-26 · Partial fix · 4.18.5, 4.22.2 CWE-209
Priority MEDIUM 41
Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00689 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 CWE-502
Priority LOW 23
Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00518 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-524
Priority LOW 23
Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-1220
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00486 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-209
Priority LOW 36
Improper Input Validation vulnerability in Apache Camel Mail component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00549 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-20
Priority LOW 20
Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00411 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-942
Priority LOW 23
Improper Input Validation vulnerability in Apache Camel Core component.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00533 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-20
Priority LOW 30
Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0068 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-488
Priority LOW 24
Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-532
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00631 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-209
Priority LOW 36
Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00678 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-178
Priority MEDIUM 40
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-200
Priority MEDIUM 40
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00703 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-611
Priority LOW 36
Improper Input Validation vulnerability in Apache Camel Tika component.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00678 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-20
Priority LOW 27
Improper Certificate Validation vulnerability in Apache Camel Knative component.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00498 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-295
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00631 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-209
Priority LOW 27
Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-488
Priority LOW 27
Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00367 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-354
Priority LOW 27
Improper Authentication vulnerability in Apache Camel Shiro component.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00505 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-287
Priority LOW 31
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00648 · Published 2026-10-19 · Partial fix · 4.18.5, 4.22.1 +1 CWE-209
Load more
THREATIST.IORead the docs