Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-1287

In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2018-1287
  • Apache » Jmeter » Version: 2.1
    cpe:2.3:a:apache:jmeter:2.1
  • Apache » Jmeter » Version: 2.10
    cpe:2.3:a:apache:jmeter:2.10
  • Apache » Jmeter » Version: 2.11
    cpe:2.3:a:apache:jmeter:2.11
  • Apache » Jmeter » Version: 2.12
    cpe:2.3:a:apache:jmeter:2.12
  • Apache » Jmeter » Version: 2.13
    cpe:2.3:a:apache:jmeter:2.13
  • Apache » Jmeter » Version: 2.2
    cpe:2.3:a:apache:jmeter:2.2
  • Apache » Jmeter » Version: 2.3
    cpe:2.3:a:apache:jmeter:2.3
  • Apache » Jmeter » Version: 2.3.1
    cpe:2.3:a:apache:jmeter:2.3.1
  • Apache » Jmeter » Version: 2.3.2
    cpe:2.3:a:apache:jmeter:2.3.2
  • Apache » Jmeter » Version: 2.3.3
    cpe:2.3:a:apache:jmeter:2.3.3
  • Apache » Jmeter » Version: 2.3.4
    cpe:2.3:a:apache:jmeter:2.3.4
  • Apache » Jmeter » Version: 2.4
    cpe:2.3:a:apache:jmeter:2.4
  • Apache » Jmeter » Version: 2.5
    cpe:2.3:a:apache:jmeter:2.5
  • Apache » Jmeter » Version: 2.5.1
    cpe:2.3:a:apache:jmeter:2.5.1
  • Apache » Jmeter » Version: 2.6
    cpe:2.3:a:apache:jmeter:2.6
  • Apache » Jmeter » Version: 2.7
    cpe:2.3:a:apache:jmeter:2.7
  • Apache » Jmeter » Version: 2.8
    cpe:2.3:a:apache:jmeter:2.8
  • Apache » Jmeter » Version: 2.9
    cpe:2.3:a:apache:jmeter:2.9
  • Apache » Jmeter » Version: 3.0
    cpe:2.3:a:apache:jmeter:3.0
  • Apache » Jmeter » Version: 3.1
    cpe:2.3:a:apache:jmeter:3.1
  • Apache » Jmeter » Version: 3.2
    cpe:2.3:a:apache:jmeter:3.2
  • Apache » Jmeter » Version: 3.3
    cpe:2.3:a:apache:jmeter:3.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved