CVE-2015-5348

Published: Apr 15, 2016Modified: May 6, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

Affected (58)

Products: Apache: Camel

Apache

1 product

Camel

Configuration A

58 vulnerable

Vulnerable Software	Affected Versions
Apache Camel	Version 2.10.0
Apache Camel	Version 2.10.1
Apache Camel	Version 2.10.2
Apache Camel	Version 2.10.3
Apache Camel	Version 2.10.4
Apache Camel	Version 2.10.5
Apache Camel	Version 2.10.6
Apache Camel	Version 2.10.7
Apache Camel	Version 2.11.0
Apache Camel	Version 2.11.1
Apache Camel	Version 2.11.2
Apache Camel	Version 2.11.3
Apache Camel	Version 2.11.4
Apache Camel	Version 2.12.0
Apache Camel	Version 2.12.1
Apache Camel	Version 2.12.2
Apache Camel	Version 2.12.3
Apache Camel	Version 2.12.4
Apache Camel	Version 2.12.5
Apache Camel	Version 2.13.0
Apache Camel	Version 2.13.1
Apache Camel	Version 2.13.2
Apache Camel	Version 2.13.3
Apache Camel	Version 2.13.4
Apache Camel	Version 2.14.0
Apache Camel	Version 2.14.1
Apache Camel	Version 2.14.2
Apache Camel	Version 2.14.3
Apache Camel	Version 2.14.4
Apache Camel	Version 2.15.0
Apache Camel	Version 2.15.1
Apache Camel	Version 2.15.2
Apache Camel	Version 2.15.3
Apache Camel	Version 2.15.4
Apache Camel	Version 2.16.0
Apache Camel	Version 2.6.0
Apache Camel	Version 2.7.0
Apache Camel	Version 2.7.1
Apache Camel	Version 2.7.2
Apache Camel	Version 2.7.3
Apache Camel	Version 2.7.4
Apache Camel	Version 2.7.5
Apache Camel	Version 2.8.0
Apache Camel	Version 2.8.1
Apache Camel	Version 2.8.2
Apache Camel	Version 2.8.3
Apache Camel	Version 2.8.4
Apache Camel	Version 2.8.5
Apache Camel	Version 2.8.6
Apache Camel	Version 2.9.0
Apache Camel	Version 2.9.1
Apache Camel	Version 2.9.2
Apache Camel	Version 2.9.3
Apache Camel	Version 2.9.4
Apache Camel	Version 2.9.5
Apache Camel	Version 2.9.6
Apache Camel	Version 2.9.7
Apache Camel	Version 2.9.8