CVE-2014-0003

Опубликовано: 21 мар. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*

Версия до 2.11.3 (включая)

cpe:2.3:a:apache:camel:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone1:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone2:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.0.0:milestone3:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.10.7:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.11.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.11.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.11.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apache:camel:2.12.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.12.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:camel:2.12.2:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.07352

Низкий

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-0003

ubuntu

больше 12 лет назад

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

CVE-2014-0003

redhat

больше 12 лет назад

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

GHSA-h6rp-8v4j-hwph

github

почти 8 лет назад

Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods

EPSS

Процентиль: 94%

0.07352

Низкий

7.5 High

CVSS2

Дефекты

CWE-264