Lucene search
GoogleOSV:GHSA-P76J-5V6V-6C22HistoryMay 14, 2022 - 3:16 a.m.
Apache NiFi JMS Deserialization issue
2022-05-1403:16:19
Google
osv.dev
16
0.039 Low
EPSS
Percentile
92.0%
Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Related
cve
cve
CVE-2018-1310
2018-05-23 14:29:00
CVE-2015-5254
2016-01-08 19:59:00
cvelist
cvelist
CVE-2018-1310
2018-04-08 00:00:00
CVE-2015-5254
2016-01-08 19:00:00
github
github
Apache NiFi JMS Deserialization issue
2022-05-14 03:16:19
Improper Input Validation in Apache ActiveMQ
2022-05-13 01:30:05
prion
prion
Deserialization of untrusted data
2018-05-23 14:29:00
Code injection
2016-01-08 19:59:00
nvd
nvd
CVE-2018-1310
2018-05-23 14:29:00
CVE-2015-5254
2016-01-08 19:59:00
veracode
veracode
Denial Of Service (DoS) Through JMS Deserialization
2018-05-24 06:38:04
Deserialization Of Untrusted Data
2019-01-15 09:11:04
osv
osv
CVE-2018-1310
2018-05-23 14:29:00
activemq - security update
2016-03-20 00:00:00
Improper Input Validation in Apache ActiveMQ
2022-05-13 01:30:05
nessus
nessus
Fedora 22 : activemq-5.6.0-14.fc22 (2015-7ca4368b0c)
2016-03-04 00:00:00
Fedora 23 : activemq-5.6.0-14.fc23 (2015-eefc5a6762)
2016-03-04 00:00:00
Apache ActiveMQ 5.x < 5.13.0 Java Object Deserialization RCE
2015-12-16 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Plugin Remote Code Execution (CVE-2015-5254)
2019-09-09 00:00:00
debian
debian
[SECURITY] [DSA 3524-1] activemq security update
2016-03-20 22:36:09
fedora
fedora
[SECURITY] Fedora 23 Update: activemq-5.6.0-14.fc23
2015-12-25 00:30:25
[SECURITY] Fedora 22 Update: activemq-5.6.0-14.fc22
2015-12-28 23:59:02
ibm
ibm
openvas
openvas
Fedora Update for activemq FEDORA-2015-7
2015-12-29 00:00:00
Apache ActiveMQ Unsafe deserialization Code Execution Vulnerability - Linux
2016-10-04 00:00:00
Debian: Security Advisory (DSA-3524-1)
2016-03-19 00:00:00
freebsd
freebsd
activemq -- Unsafe deserialization
2016-01-08 00:00:00
debiancve
debiancve
CVE-2015-5254
2016-01-08 19:59:00
ubuntucve
ubuntucve
CVE-2015-5254
2016-01-08 00:00:00
redhat
redhat
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00