Lucene search
Veracode Vulnerability DatabaseVERACODE:6374HistoryMay 24, 2018 - 6:38 a.m.
Denial Of Service (DoS) Through JMS Deserialization
2018-05-2406:38:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
EPSS
0.036
Percentile
91.9%
nifi-jms-processors is vulnerable to denial of service (DoS) attacks. The vulnerability exists due to the usage of the vulnerable transitive activemq-client library, affected by CVE-2015-5254, which would cause a DoS attack when malicious JMS content is parsed.
Related
osv
osv
Apache NiFi JMS Deserialization issue
2022-05-14 03:16:19
CVE-2018-1310
2018-05-23 14:29:00
activemq - security update
2016-03-20 00:00:00
prion
prion
Deserialization of untrusted data
2018-05-23 14:29:00
Code injection
2016-01-08 19:59:00
nvd
nvd
CVE-2018-1310
2018-05-23 14:29:00
CVE-2015-5254
2016-01-08 19:59:00
cvelist
cvelist
CVE-2018-1310
2018-05-23 14:00:00
CVE-2015-5254
2016-01-08 19:00:00
github
github
Apache NiFi JMS Deserialization issue
2022-05-14 03:16:19
Improper Input Validation in Apache ActiveMQ
2022-05-13 01:30:05
cve
cve
CVE-2018-1310
2018-05-23 14:29:00
CVE-2015-5254
2016-01-08 19:59:00
openvas
openvas
Apache ActiveMQ Unsafe deserialization Code Execution Vulnerability - Linux
2016-10-04 00:00:00
Fedora Update for activemq FEDORA-2015-7
2015-12-29 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: activemq-5.6.0-14.fc23
2015-12-25 00:30:25
[SECURITY] Fedora 22 Update: activemq-5.6.0-14.fc22
2015-12-28 23:59:02
ibm
ibm
nessus
nessus
Apache ActiveMQ 5.x < 5.13.0 Java Object Deserialization RCE
2015-12-16 00:00:00
Fedora 23 : activemq-5.6.0-14.fc23 (2015-eefc5a6762)
2016-03-04 00:00:00
Fedora 22 : activemq-5.6.0-14.fc22 (2015-7ca4368b0c)
2016-03-04 00:00:00
freebsd
freebsd
activemq -- Unsafe deserialization
2016-01-08 00:00:00
veracode
veracode
Deserialization Of Untrusted Data
2019-01-15 09:11:04
debian
debian
[SECURITY] [DSA 3524-1] activemq security update
2016-03-20 22:36:09
checkpoint_advisories
checkpoint_advisories
Apache ActiveMQ Plugin Remote Code Execution (CVE-2015-5254)
2019-09-09 00:00:00
debiancve
debiancve
CVE-2015-5254
2016-01-08 19:59:00
ubuntucve
ubuntucve
CVE-2015-5254
2016-01-08 00:00:00
redhat
redhat
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00