Flume (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2022-10-26. Vendor: Apache.

CVEs of Flume

• CVE-2022-42468 - CVSS 9.8 (critical), 2022-10-26: Apache Flume versions 1.4.0 through 1.10.1 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with an unsafe…
• CVE-2022-34916 - CVSS 9.8 (critical), 2022-08-21: Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data…
• CVE-2022-25167 - CVSS 9.8 (critical), 2022-06-14: Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data…