Red Hat Build of Apache Camel For Spring Boot
15 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Red Hat Build of Apache Camel For Spring Boot, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Red Hat Build of Apache Camel For Spring Boot CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 2 |
| 2024-11 | 1 |
| 2024-12 | 1 |
| 2025-01 | 0 |
| 2025-02 | 1 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 2 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 15 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High8
- Medium7
Latest CVEs
The 15 most recently published vulnerabilities affecting Red Hat Build of Apache Camel For Spring Boot.
- CVE-2025-58457Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands4.3
- CVE-2025-48734Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default8.8
- CVE-2024-13009Eclipse Jetty GZIP buffer release7.2
- CVE-2025-24970SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5
- CVE-2024-12798JaninoEventEvaluator vulnerability7.3
- CVE-2024-31141Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider6.5
- CVE-2024-8184Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9
- CVE-2024-9823Jetty DOS vulnerability on DosFilter5.3
- CVE-2024-38809Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users ...5.3
- CVE-2024-38808CVE-2024-38808: Spring Expression DoS Vulnerability4.3
- CVE-2024-5971Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5
- CVE-2024-6162Undertow: url-encoded request path information can be broken on ajp-listener7.5
- CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3
- CVE-2022-4244Codehaus-plexus: directory traversal7.5
- CVE-2022-1415Drools: unsafe data deserialization in streamutils8.1
Product grouping is registry-driven, with AI assist and human review. How it works