CVE-2018-8027: Apache Camel

Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days.

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.

Affected products

• Apache Camel: from 2.20.0, up to and including 2.20.3; version 2.21.0 only

Published 2018-07-31. Last modified 2026-06-17.