Vulnerability Details CVE-2015-0263
XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.0%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2015-0263
-
-
cpe:2.3:a:apache:camel:1.0.0
-
cpe:2.3:a:apache:camel:1.1.0
-
cpe:2.3:a:apache:camel:1.2.0
-
cpe:2.3:a:apache:camel:1.3.0
-
cpe:2.3:a:apache:camel:1.4.0
-
cpe:2.3:a:apache:camel:1.5.0
-
cpe:2.3:a:apache:camel:1.6.0
-
cpe:2.3:a:apache:camel:1.6.1
-
cpe:2.3:a:apache:camel:1.6.2
-
cpe:2.3:a:apache:camel:1.6.3
-
cpe:2.3:a:apache:camel:1.6.4
-
cpe:2.3:a:apache:camel:2.0.0
-
cpe:2.3:a:apache:camel:2.1.0
-
cpe:2.3:a:apache:camel:2.10.0
-
cpe:2.3:a:apache:camel:2.10.1
-
cpe:2.3:a:apache:camel:2.10.2
-
cpe:2.3:a:apache:camel:2.10.3
-
cpe:2.3:a:apache:camel:2.10.4
-
cpe:2.3:a:apache:camel:2.10.5
-
cpe:2.3:a:apache:camel:2.10.6
-
cpe:2.3:a:apache:camel:2.10.7
-
cpe:2.3:a:apache:camel:2.11.0
-
cpe:2.3:a:apache:camel:2.11.1
-
cpe:2.3:a:apache:camel:2.11.2
-
cpe:2.3:a:apache:camel:2.11.3
-
cpe:2.3:a:apache:camel:2.11.4
-
cpe:2.3:a:apache:camel:2.12.0
-
cpe:2.3:a:apache:camel:2.12.1
-
cpe:2.3:a:apache:camel:2.12.2
-
cpe:2.3:a:apache:camel:2.12.3
-
cpe:2.3:a:apache:camel:2.12.4
-
cpe:2.3:a:apache:camel:2.12.5
-
cpe:2.3:a:apache:camel:2.13.0
-
cpe:2.3:a:apache:camel:2.13.1
-
cpe:2.3:a:apache:camel:2.13.2
-
cpe:2.3:a:apache:camel:2.13.3
-
cpe:2.3:a:apache:camel:2.14.0
-
cpe:2.3:a:apache:camel:2.14.1
-
cpe:2.3:a:apache:camel:2.2.0
-
cpe:2.3:a:apache:camel:2.3.0
-
cpe:2.3:a:apache:camel:2.4.0
-
cpe:2.3:a:apache:camel:2.5.0
-
cpe:2.3:a:apache:camel:2.6.0
-
cpe:2.3:a:apache:camel:2.7.0
-
cpe:2.3:a:apache:camel:2.7.1
-
cpe:2.3:a:apache:camel:2.7.2
-
cpe:2.3:a:apache:camel:2.7.3
-
cpe:2.3:a:apache:camel:2.7.4
-
cpe:2.3:a:apache:camel:2.7.5
-
cpe:2.3:a:apache:camel:2.8.0
-
cpe:2.3:a:apache:camel:2.8.1
-
cpe:2.3:a:apache:camel:2.8.2
-
cpe:2.3:a:apache:camel:2.8.3
-
cpe:2.3:a:apache:camel:2.8.4
-
cpe:2.3:a:apache:camel:2.8.5
-
cpe:2.3:a:apache:camel:2.8.6
-
cpe:2.3:a:apache:camel:2.9.0
-
cpe:2.3:a:apache:camel:2.9.1
-
cpe:2.3:a:apache:camel:2.9.2
-
cpe:2.3:a:apache:camel:2.9.3
-
cpe:2.3:a:apache:camel:2.9.4
-
cpe:2.3:a:apache:camel:2.9.5
-
cpe:2.3:a:apache:camel:2.9.6
-
cpe:2.3:a:apache:camel:2.9.7
-
cpe:2.3:a:apache:camel:2.9.8