CVE:CVE-2020-11994
CNNVD:CNNVD-202007-381
Apache Camel是美国阿帕奇（Apache）基金会的一套开源的基于Enterprise Integration Pattern(企业整合模式，简称EIP)的集成框架。该框架提供企业集成模式的Java对象（POJO）的实现，且通过应用程序接口来配置路由和中介的规则。
Apache Camel 中存在注入漏洞。攻击者可利用该漏洞访问或修改与Web应用程序关联的信息。
solution:Upgrade apache camel to a higher version than 2.22.5,2.23.4,2.24.3,3.3.0,2.25.0,2.25.1,and avoid the version [2.22.0,2.22.5],[2.23.0,2.23.4],[2.24.0,2.24.3],[3.0.0,3.3.0],2.25.0,2.25.1; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0,and avoid the version [8.0.0,8.5.0]; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,and avoid the version 13.4.0.0; Upgrade oracle enterprise_repository to a higher version than 11.1.1.7.0,and avoid the version 11.1.1.7.0