CVE-2017-12633: Apache Camel

Critical severity, CVSS 9.8. EPSS: 7.2% chance of exploitation in the next 30 days.

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.

Affected products

• Apache Camel: from 2.0.0, before 2.19.4 (fixed in 2.19.4); from 2.20.0, before 2.20.1 (fixed in 2.20.1)

Published 2017-11-15. Last modified 2026-06-17.