Red Hat Enterprise Linux Apache Camel 1

productDE

cpe:/o:redhat:enterprise_linux:apache_camel_1

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical15high12medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	no fix	2022-12-28	—
CVE-2022-40146US	high7.5	7.43% (94th)	Exploit	no fix	2022-09-22	—
CVE-2022-41853US	critical9.8	5.15% (92nd)	Exploit	no fix	2022-10-06	—
CVE-2025-8671US	—	3.62% (89th)	Exploit	no fix	2025-08-13	—
CVE-2023-20860US	high7.5	3.51% (89th)	Exploit	no fix	2023-03-27	—
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	no fix	2025-08-13	—
CVE-2022-41852US	—	—	Exploit	no fix	2022-10-06	—
CVE-2025-48989US	—	3.69% (90th)	—	no fix	2025-08-13	—
CVE-2025-5115US	high7.5	3.57% (89th)	—	no fix	2025-08-20	—
CVE-2022-42890US	high7.5	3.36% (89th)	—	no fix	2022-10-25	—
CVE-2022-41704US	high7.5	3.10% (88th)	—	no fix	2022-10-25	—
CVE-2022-25857US	high7.5	2.93% (87th)	—	no fix	2022-08-30	—
CVE-2022-38398US	medium5.3	2.58% (85th)	—	no fix	2022-09-22	—
CVE-2022-38752US	medium6.5	2.53% (85th)	—	no fix	2022-09-05	—
CVE-2022-38648US	medium5.3	2.43% (84th)	—	no fix	2022-09-22	—
CVE-2022-40151US	high7.5	2.22% (83rd)	—	no fix	2022-09-16	—
CVE-2021-37533US	medium6.5	2.13% (82nd)	—	no fix	2022-12-03	—
CVE-2022-38749US	medium6.5	2.06% (81st)	—	no fix	2022-09-05	—
CVE-2022-38751US	medium6.5	1.91% (80th)	—	no fix	2022-09-05	—
CVE-2022-37865US	critical9.1	1.89% (79th)	—	no fix	2022-11-07	—
CVE-2022-37866US	high7.5	1.69% (77th)	—	no fix	2022-11-07	—
CVE-2022-31777US	medium5.4	1.64% (76th)	—	no fix	2022-11-01	—
CVE-2023-22602US	high7.5	1.60% (76th)	—	no fix	2023-01-14	—
CVE-2022-41881US	high7.5	1.58% (75th)	—	no fix	2022-12-12	—
CVE-2022-41854US	medium6.5	1.55% (75th)	—	no fix	2022-11-11	—
CVE-2022-38750US	medium5.5	1.25% (69th)	—	no fix	2022-09-05	—
CVE-2023-20863US	medium6.5	1.12% (66th)	—	no fix	2023-04-13	—
CVE-2023-1370US	high7.5	1.12% (66th)	—	no fix	2023-03-22	—
CVE-2025-1634US	—	0.99% (62nd)	—	no fix	2025-02-26	—
CVE-2023-20861US	medium6.5	0.97% (62nd)	—	no fix	2023-03-23	—
CVE-2024-12397US	—	0.84% (58th)	—	no fix	2024-12-12	—
CVE-2025-1247US	—	0.82% (57th)	—	no fix	2025-02-13	—
CVE-2022-33681US	medium5.9	0.70% (53rd)	—	no fix	2022-09-23	—
CVE-2025-22867US	—	0.65% (51st)	—	no fix	2025-02-06	—
CVE-2022-39368US	high8.2	0.61% (49th)	—	no fix	2022-11-10	—
CVE-2022-4492US	high7.5	0.60% (48th)	—	no fix	2023-02-23	—
CVE-2024-47535US	—	0.41% (35th)	—	no fix	2024-11-12	—
CVE-2025-22866US	—	0.29% (21st)	—	no fix	2025-02-06	—
CVE-2022-40156US	—	—	—	no fix	2022-09-16	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-121Stack-based Buffer Overflow7 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-918Server-Side Request Forgery (SSRF)6 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-674Uncontrolled Recursion3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan