Product by Apache Software Foundation
Apache JMeter
14 known vulnerabilities in Apache JMeter (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-1297 | Apache JMeter: security vulnerability | 9.8 | |
| High | CVE-2021-21341 | XStream can cause a Denial of Service | 7.5 | |
| Critical | CVE-2018-1287 | Apache JMeter: security vulnerability | 9.8 | |
| Critical | CVE-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| High | CVE-2021-21349 | Xstream: Deserialization of Untrusted Data | 6.1 | |
| Critical | CVE-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 5.8 | |
| Critical | CVE-2019-0187 | Apache JMeter: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.4 | |
| Critical | CVE-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| Critical | CVE-2021-21347 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| Critical | CVE-2021-21342 | Xstream: Deserialization of Untrusted Data | 5.3 | |
| High | CVE-2021-21343 | Xstream: External Control of File Name or Path | 5.3 | |
| Critical | CVE-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| High | CVE-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | 5.3 |