Apache Jmeter

14 CVEs affecting Apache Jmeter. Latest disclosed: 2021-03-23. Critical: 3, High: 1.

Top CVEs affecting Apache Jmeter
CVESeverityScorePublishedSummary
CVE-2019-0187Critical9.82019-03-06Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-se…
CVE-2018-1287Critical9.82018-02-14In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to…
CVE-2018-1297Critical9.82018-02-13When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterE…
CVE-2021-21341High7.52021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacke…
CVE-2021-21349Medium6.12021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21347Medium6.12021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21346Medium6.12021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21345Medium5.82021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21351Medium5.42021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to…
CVE-2021-21350Medium5.32021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21348Medium5.32021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21344Medium5.32021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac…
CVE-2021-21343Medium5.32021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at…
CVE-2021-21342Medium5.32021-03-23XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at…