CVE-2021-21351
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute ar…
Vendor/product archive
apache / jmeter CVEs
Beta · best-effort14 CVEs tagged to apache / jmeter — 3 Critical, 1 High, 10 Medium, 0 Low, 0 Unrated.
CVE-2021-21350
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbit…
CVE-2021-21349
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data…
CVE-2021-21348
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thre…
CVE-2021-21347
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and exec…
CVE-2021-21346
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and exec…
CVE-2021-21345
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficie…
CVE-2021-21344
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and exec…
CVE-2021-21343
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time c…
CVE-2021-21342
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time c…
CVE-2021-21341
Published Mar 23, 2021XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% C…
CVE-2019-0187
Published Mar 6, 2019Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMe…
CVE-2018-1287
Published Feb 14, 2018In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeter…
CVE-2018-1297
Published Feb 13, 2018When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unaut…
Showing 1-14 of 14 CVEsPage 1 of 1