Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2016-8749

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

VectorNETWORK

PublishedMar 28, 2017, 18:59

Published Bysecurity@apache.org

Base Score

Score9.8

Package (Ecosystem)IntroducedFixedLimit

org.apache.camel:camel-jackson(Maven)02.16.5N/A

org.apache.camel:camel-jackson(Maven)2.17.02.17.5N/A

org.apache.camel:camel-jackson(Maven)2.18.02.18.2N/A

CWE-502

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK