CVE-2014-0002
NoneCVSS
—
EPSS
27.4%
Published
Mar 21, 2014
CISA due date
—
The record
The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.camel:camel-core | 0 | 2.11.4 |
| Maven | org.apache.camel:camel-core | 2.12.0 | 2.12.3 |
| maven | org.apache.camel/camel-core | 2.12-alpha0 | No fix |
Related vulnerabilities
- CVE-2026-81644 DoS vulnerability in the preview service module. CWE-264
- CVE-2026-49315 DoS vulnerability in the input device module. CWE-264
- CVE-2026-49313 Permission control vulnerability in the app lock module. CWE-264
- CVE-2026-49312 Permission control vulnerability in the window module. CWE-264
- CVE-2026-49310 Permission control vulnerability in the event notification module. CWE-264
- CVE-2026-41987 Permission control vulnerability in the app management module. CWE-264
- CVE-2026-49309 Permission control vulnerability in the Settings module. CWE-264
- CVE-2026-49308 Permission control vulnerability in the clipboard module. Impact: Successful exploitation… CWE-264