Apache Jmeter vulnerabilities

• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21351 Fix available EPSS 82.1% 5.4 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21350 Fix available EPSS 15.2% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +14 more +16 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21349 Public exploitFix available EPSS 46.8% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) CVE-2021-21348 Fix available EPSS 13.8% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21347 Fix available EPSS 14.3% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21346 Fix available EPSS 76.4% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-21345 Public exploitFix available EPSS 72.3% 5.8 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21344 Fix available EPSS 76.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights CVE-2021-21343 Fix available EPSS 46.7% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21342 Fix available EPSS 50.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +10 more +12 more XStream can cause a Denial of Service CVE-2021-21341 Public exploitFix available EPSS 77.8% 7.5 HighMarch 22, 2021
• apache jmeter Unauthenticated Remote Code Execution in Apache JMeter CVE-2019-0187 Fix available 9.8 CriticalMarch 6, 2019
• apache jmeter Missing certificate validation in Apache JMeter CVE-2018-1287 Fix available 9.8 CriticalFebruary 14, 2018
• apache jmeter Missing certificate validation in Apache JMeter CVE-2018-1297 Public exploitFix available EPSS 11.5% 9.8 CriticalFebruary 13, 2018