CVE-2014-0003
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
- EPSS
- 7.5% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:camel
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-h6rp-8v4j-hwph | Maven | org.apache.camel:camel-core | >=2.11.0 <2.11.4 | 2.11.4 |
| GHSA-h6rp-8v4j-hwph | Maven | org.apache.camel:camel-core | >=2.12.0 <2.12.3 | 2.12.3 |