CVE-2018-1297

CVE-2018-1297: vulnerability in Apache JMeter

Published · Updated

Follow this CVE+ Monitor Apache JMeter+ Monitor jakarta-jmeter

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 12%
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
Affected products
Apache Software Foundation · Apache JMeter
Related CVEs — Apache JMeter

In the same product, most dangerous first.

CVE-2018-1287—CVE-2018-1287EPSS 3.4%CVE-2019-0187—CVE-2019-0187EPSS 2.6%