CVE-2015-0264

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote…

published June 3, 2015

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07098 · 94.2th percentile
Published
2015-06-03T20:00Z
EPSS history
Timeline
  • 03 JUN 20:00Z
    Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote…
    cvelistv5