Product by Apache Software Foundation
Apache Camel
126 known vulnerabilities in Apache Camel (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
126
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
31
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-33453 | Apache Camel: Improperly Controlled Modification of Dynamically-Determined Object Attributes | 10.0 | |
| Critical | CVE-2026-40047 | Apache Camel: Argument Injection | 9.1 | |
| Critical | CVE-2016-8749 | Apache Camel: Remote Code Execution | 9.8 | |
| Critical | CVE-2017-12633 | Apache Camel: security vulnerability | 9.8 | |
| Critical | CVE-2017-12634 | Apache Camel: security vulnerability | 9.8 | |
| Critical | CVE-2015-5344 | Apache Camel: security vulnerability | 9.8 | |
| Critical | CVE-2020-11973 | Apache Camel: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2017-3159 | Apache Camel: security vulnerability | 9.8 | |
| Critical | CVE-2026-78162 | Apache Camel: Deserialization of Untrusted Data | — | |
| Critical | CVE-2020-11972 | Apache Camel: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-8027 | Apache Camel: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2026-40453 | Apache Camel JMS: Improper Handling of Case Sensitivity | 9.9 | |
| Medium | CVE-2025-27636 | Apache Camel: Camel Message Header Injection via Improper Filtering | 5.6 | |
| Critical | CVE-2026-47323 | Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering | 9.8 | |
| High | CVE-2020-11971 | Apache Camel: security vulnerability | 7.5 | |
| Medium | CVE-2025-29891 | Apache Camel: Camel Message Header Injection through request parameters | 4.8 | |
| High | CVE-2015-5348 | Apache Camel: security vulnerability | 8.1 | |
| High | CVE-2019-0188 | Apache Camel: XML External Entity (XXE) | 7.5 | |
| Critical | CVE-2026-40860 | Apache Camel: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2019-0194 | Apache Camel: Path Traversal | 7.5 | |
| Critical | CVE-2026-80351 | Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod | 9.8 | |
| High | CVE-2020-5529 | HtmlUnit: Code Execution | 8.1 | |
| High | CVE-2017-5643 | Apache Camel: XML External Entity (XXE) | 7.4 | |
| High | CVE-2020-11994 | Apache Camel: Template Injection | 7.5 | |
| Critical | CVE-2026-53913 | Apache Camel Keycloak: Missing Authentication for Critical Function | 9.8 |