CWE-164 · 3 records
Improper Neutralization of Internal Special Elements
CVEs in this class
3 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2025-29891No exploit | Apache Camel: Camel Message Header Injection through request parametersapache · camel · CWE-164 | Medium4.8 | — | 76.0% | Mar 12, 2025 |
39Monitor | CVE-2026-19072No exploit | Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipalrapid7 · velociraptor · CWE-164 | Critical9.9 | — | 0.3% | Sep 24, 2026 |
26Monitor | CVE-2025-30177No exploit | Apache Camel: Camel-Undertow Message Header Injection via Improper Filteringapache · camel · CWE-164 | Medium6.5 | — | 1.2% | Apr 1, 2025 |
- CVE-2025-2989142Plan
Apache Camel: Camel Message Header Injection through request parameters
MediumCVSS 4.8No exploitEPSS 76%apache · camelMar 12, 2025
- CVE-2026-1907239Monitor
Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
CriticalCVSS 9.9No exploitEPSS 0%rapid7 · velociraptorSep 24, 2026
- CVE-2025-3017726Monitor
Apache Camel: Camel-Undertow Message Header Injection via Improper Filtering
MediumCVSS 6.5No exploitEPSS 1%apache · camelApr 1, 2025