What’s Vulnerable › Products

Apache Software Foundation Apache Flume vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Apache Software Foundation Apache Flume version is affected

Latest Apache Software Foundation Apache Flume vulnerabilities

• CVE-2022-42468 — Apache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSource (CVSS 9.8)
• CVE-2022-34916 — Improper Input Validation (JNDI Injection) in JMSMessageConsumer (CVSS 9.8)
• CVE-2022-25167 — Apache Flume vulnerable to a JNDI RCE in JMSSource (CVSS 9.8)