VULNERABILITY INTELLIGENCE

CVE-2015-0263

CVSS score5 MEDIUM
EPSS probability7.47%
CISA KEVNot currently listed
Published2015-06-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

Primary references