Apache Software Foundation Apache Camel

Name: Apache Software Foundation Apache Camel
Brand: Apache Software Foundation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical2high1medium0low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27636US	—	97.1% (100th)	Exploit	4.10.2	2025-03-09	3 versions
CVE-2026-47323US	—	19.6% (97th)	Exploit	4.14.6	2026-05-19	2 versions
CVE-2018-8041US	medium5.3	9.59% (95th)	Exploit	no fix	2018-09-17	≤ Camel 2.20.0 to 2.20.3, Camel 2.21.0 to 2.21.1 and Camel 2.22.0
CVE-2026-33453US	—	9.18% (95th)	Exploit	4.18.1	2026-04-27	3 versions
CVE-2026-40047US	—	2.43% (84th)	Exploit	4.18.3	2026-07-06	4.15.0 → 4.18.3
CVE-2026-40453US	—	2.10% (82nd)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2026-40860US	—	1.74% (78th)	Exploit	4.18.2	2026-04-27	4 versions
CVE-2026-33454US	—	1.49% (74th)	Exploit	4.14.6	2026-04-27	3 versions
CVE-2026-40858US	—	1.31% (70th)	Exploit	4.18.2	2026-04-27	4 versions
CVE-2026-27172US	—	1.23% (69th)	Exploit	4.14.6	2026-04-27	3 versions
CVE-2026-40473US	—	1.19% (68th)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2026-43865US	—	0.98% (62nd)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-40022US	—OT elevated	0.94% (61st)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2026-43867US	—	0.93% (60th)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-40859US	—	0.89% (59th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-46590US	—	0.84% (58th)	Exploit	4.21.0	2026-07-06	2 versions
CVE-2026-46454US	—	0.83% (57th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46456US	—	0.79% (56th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2024-22369US	—	0.75% (55th)	Exploit	4.4.0	2024-02-20	5 versions
CVE-2026-48204US	—	0.73% (54th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2024-22371US	high7.5	0.69% (53rd)	Exploit	no fix	2024-02-26	5 versions
CVE-2026-49042US	—	0.69% (53rd)	Exploit	no fix	2026-07-06	2 versions
CVE-2026-46588US	—	0.69% (53rd)	Exploit	no fix	2026-07-06	3 versions
CVE-2026-46587US	—	0.69% (53rd)	Exploit	no fix	2026-07-06	3 versions
CVE-2026-46455US	—	0.69% (53rd)	Exploit	4.18.3	2026-07-06	2 versions
CVE-2026-49097US	—	0.68% (52nd)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-42527US	—	0.67% (52nd)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-46457US	—	0.66% (51st)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-43866US	—	0.65% (51st)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-46592US	—	0.63% (50th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-49098US	—	0.61% (49th)	Exploit	4.21.0	2026-07-06	3 versions
CVE-2026-23552US	—	0.61% (49th)	Exploit	4.18.0	2026-02-23	4.15.0 → 4.18.0
CVE-2026-48203US	—	0.60% (48th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-49365US	—	0.57% (47th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-46453US	—	0.55% (46th)	Exploit	4.18.3	2026-07-06	3 versions
CVE-2026-46591US	—	0.55% (46th)	Exploit	4.14.8	2026-07-06	3 versions
CVE-2026-40048US	—	0.33% (26th)	Exploit	no fix	2026-04-27	≤ vers:unknown/*
CVE-2025-29891US	—	76.1% (100th)	—	4.10.2	2025-03-12	3 versions
CVE-2016-8749US	critical9.8	10.6% (96th)	—	no fix	2017-03-28	4 versions
CVE-2017-12634US	critical9.8	7.19% (94th)	—	no fix	2017-11-15	3 versions
CVE-2017-12633US	critical9.8	7.19% (94th)	—	no fix	2017-11-15	3 versions
CVE-2017-3159US	critical9.8	6.29% (94th)	—	no fix	2017-03-07	3 versions
CVE-2017-5643US	high7.4	5.86% (93rd)	—	no fix	2017-03-16	3 versions
CVE-2018-8027US	critical9.8	5.45% (93rd)	—	no fix	2018-07-31	2 versions
CVE-2025-30177US	—	1.29% (70th)	—	4.8.6	2025-04-01	2 versions
CVE-2024-23114US	—	1.27% (70th)	—	4.0.4	2024-02-20	5 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data18 CVEs
CWE-20Improper Input Validation12 CVEs
CWE-178Improper Handling of Case Sensitivity3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-164Improper Neutralization of Internal Special Elements2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-1173Improper Use of Validation Framework1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)42 CVEs
NLNCSC-NL (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan