NVD

Id
22750  
Name
CVE-2015-0264  
Description
Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-06-03  
Modified Date
2015-11-19  
Seq
2015-0264  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
120535 22750 CVE-2015-0264 RHSA-2015:1041  View
120536 22750 CVE-2015-0264 RHSA-2015:1538  View
120537 22750 CVE-2015-0264 1032442  View
120538 22750 CVE-2015-0264 https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc  View
120539 22750 CVE-2015-0264 https://git-wip-us.apache.org/repos/asf?p=camel.git;a=commitdiff;h=1df559649a96a1ca0368373387e542f46e4820da  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7617 JVNDB-2015-002937 Apache Camel の builder/xml/XPathBuilder.java における XML 外部エンティティの脆弱性 Apache Camel の builder/xml/XPathBuilder.java には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2015-0264 77475 CVE-2015-0264 22750 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002937.html 2015-03-02 2015-09-03 View