What’s Vulnerable › Products

Apache Software Foundation Apache JMeter vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Apache Software Foundation Apache JMeter version is affected

Latest Apache Software Foundation Apache JMeter vulnerabilities

• CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)
• CVE-2021-21350 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
• CVE-2021-21349 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 8.6)
• CVE-2021-21348 — XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) (CVSS 7.5)
• CVE-2021-21347 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
• CVE-2021-21346 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
• CVE-2021-21345 — XStream is vulnerable to a Remote Command Execution attack (CVSS 9.9)
• CVE-2021-21344 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
• CVE-2021-21343 — XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights (CVSS 7.5)
• CVE-2021-21342 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 9.1)
• CVE-2021-21341 — XStream can cause a Denial of Service (CVSS 7.5)
• CVE-2019-0187 — (CVSS 9.8)
• CVE-2018-1287 — (CVSS 9.8)
• CVE-2018-1297 — (CVSS 9.8)