| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.camel:camel-core | < 2.24.0 | 2.24.0 |
| org.apache.camel:camel-xmljson | ≤ 2.23.4 | |
| camel | < 2.24.0 | 2.24.0 |
| enterprise data quality | = 11.1.1.9.0 | |
| enterprise manager base platform | = 13.3.0.0= 13.4.0.0 | |
| enterprise repository | = 12.1.3.0.0 | |
| flexcube private banking | = 12.0.0= 12.1.0 |
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free