CVE-2015-0263: Apache Camel

Medium severity, CVSS 5.0. EPSS: 7.5% chance of exploitation in the next 30 days.

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

Affected products

• Apache Camel: up to and including 2.13.3; version 2.14.0 only; version 2.14.1 only

Published 2015-06-03. Last modified 2026-06-17.