CVE-2015-0263

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

• http://rhn.redhat.com/errata/RHSA-2015-1041.htmlRelease Notes
• http://rhn.redhat.com/errata/RHSA-2015-1538.htmlRelease Notes
• http://rhn.redhat.com/errata/RHSA-2015-1539.html
• http://www.securitytracker.com/id/1032442Third Party Advisory, VDB Entry
• https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.ascVendor Advisory
• https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36
• https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
• https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E
• http://rhn.redhat.com/errata/RHSA-2015-1041.htmlRelease Notes
• http://rhn.redhat.com/errata/RHSA-2015-1538.htmlRelease Notes
• http://rhn.redhat.com/errata/RHSA-2015-1539.html
• http://www.securitytracker.com/id/1032442Third Party Advisory, VDB Entry
• https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.ascVendor Advisory
• https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36
• https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
• https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E

Published

Jun 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0257Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.…
• CVE-2015-0258Multiple incomplete blacklist vulnerabilities in the avatar …8.8
• CVE-2015-0259OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 20…
• CVE-2015-0260RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authe…
• CVE-2015-0261Integer signedness error in the mobility_opt_print function …
• CVE-2015-0262Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-0264Multiple XML external entity (XXE) vulnerabilities in builde…
• CVE-2015-0265Cross-site scripting (XSS) vulnerability in the Policy Admin…
• CVE-2015-0266The Policy Admin Tool in Apache Ranger before 0.5.0 allows r…
• CVE-2015-0267The Red Hat module-setup.sh script for kexec-tools, as distr…
• CVE-2015-0268The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5…
• CVE-2015-0269Directory traversal vulnerability in Contao before 3.2.19, a…