WaratekVRT Sign in

Oracle Financial Services Applications Core (Apache Camel) CVEs

2 CVEs, 2 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Financial Services Applications / Core (Apache Camel)✕
Overview 2 matches · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
2matches 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 1 50.0% High 1 50.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%
split by peak 1 / month
Protected by Waratek: 2 High: 1Critical: 1 blocked by ARMR today: 2 No public exploit: 2
May 191 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Jun 190 Jul 190 Aug 190 Sep 190 Oct 190 Nov 190 Dec 190 Jan 200 Feb 200 Mar 200 Apr 200 May 201 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1
May 19Jul 19Sep 19Nov 19Jan 20Mar 20May 20
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2020-11973 Critical 2020-05-14 Protected by Waratek No public exploit Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
CVE-2019-0188 High 2019-05-28 Protected by Waratek No public exploit Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.