Login Request a demo
JM
Product
Jmeter
by Apache · last CVE Mar 22, 2021
14
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 10High 4Medium 0Low 0
Severity
All severities14Critical10High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jmeter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21345
9.9
72%
Mar 22
XStream is vulnerable to a Remote Command Execution attack
Affected: before 5.5
CVE-2021-21350
9.8
15%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 5.5
CVE-2021-21344
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 5.5
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 5.5
CVE-2021-21347
9.8
14%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 5.5
CVE-2019-0187
9.8
3%
Mar 6
Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options)
Affected: 4.0; 5.0
CVE-2018-1287
9.8
3%
Feb 14
In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host
Affected: 2.1; 2.2; 2.3; 2.3.1; 2.3.2; 2.3.3; +34 more
CVE-2018-1297
9.8
12%
Feb 13
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection
Affected: 2.1; 2.2; 2.3; 2.3.1; 2.3.2; 2.3.3; +34 more
CVE-2021-21351
9.1
82%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 5.5
CVE-2021-21342
9.1
50%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: before 5.5
Showing 10