Vulnerability Details : CVE-2014-0003
The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
Exploit prediction scoring system (EPSS) score for CVE-2014-0003
Probability of exploitation activity in the next 30 days: 55.43%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0003
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2014-0003
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-0003
-
http://rhn.redhat.com/errata/RHSA-2014-0371.html
RHSA-2014:0371 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2014-0372.html
RHSA-2014:0372 - Security Advisory - Red Hat Customer Portal
-
http://www.securityfocus.com/bid/65902
Apache Camel CVE-2014-0003 Remote Code Execution Vulnerability
-
https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html-Apache Mail Archives
-
http://rhn.redhat.com/errata/RHSA-2014-0245.html
RHSA-2014:0245 - Security Advisory - Red Hat Customer Portal
-
https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E
svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html-Apache Mail Archives
-
http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.asc
Page Not Found - Apache CamelExploit;Vendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0254.html
RHSA-2014:0254 - Security Advisory - Red Hat Customer Portal
Products affected by CVE-2014-0003
- cpe:2.3:a:apache:camel:*:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone3:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone2:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:milestone1:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:camel:2.12.2:*:*:*:*:*:*:*