Apache Jmeter (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-03-06. Vendor: Apache Software Foundation.

CVEs of Apache Jmeter

• CVE-2019-0187 - CVSS 9.8 (critical), 2019-03-06: Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a…
• CVE-2018-1287 - CVSS 9.8 (critical), 2018-02-14: In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to…
• CVE-2018-1297 - CVSS 9.8 (critical), 2018-02-13: When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to…