Apache
Apache Jmeter: vulnerabilidades y CVE
Apache Jmeter tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 10 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas10
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-21351 | Crítica (9.1) | 82% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by… |
| CVE-2021-21350 | Crítica (9.8) | 15% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the… |
| CVE-2021-21349 | Alta (8.6) | 47% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not… |
| CVE-2021-21348 | Alta (7.5) | 14% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and… |
| CVE-2021-21347 | Crítica (9.8) | 14% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host… |
| CVE-2021-21346 | Crítica (9.8) | 76% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host… |
| CVE-2021-21345 | Crítica (9.9) | 72% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the… |
| CVE-2021-21344 | Crítica (9.8) | 76% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host… |
| CVE-2021-21343 | Alta (7.5) | 47% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the… |
| CVE-2021-21342 | Crítica (9.1) | 50% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the… |
| CVE-2021-21341 | Alta (7.5) | 78% | — | 23 mar 2021 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending… |
| CVE-2019-0187 | Crítica (9.8) | 2.7% | — | 6 mar 2019 | Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMeterEngine and proceed with an attack… |
| CVE-2018-1287 | Crítica (9.8) | 3.4% | — | 14 feb 2018 | In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. |
| CVE-2018-1297 | Crítica (9.8) | 9.9% | — | 13 feb 2018 | When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code. |