Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.jmeter/ApacheJMeter@3.0
purl pkg:maven/org.apache.jmeter/ApacheJMeter@3.0
Next non-vulnerable version 5.1
Latest non-vulnerable version 5.1
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-mb7a-bawu-7be6
Aliases:
CVE-2018-1297
GHSA-7v85-6hv2-rwgw
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
4.0
Affected by 1 other vulnerability.
VCID-xqcb-86ju-cyf2
Aliases:
CVE-2018-1287
GHSA-j7j7-g4ww-pxg5
In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
4.0
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T15:40:21.335047+00:00 GitLab Importer Affected by VCID-xqcb-86ju-cyf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.jmeter/ApacheJMeter/CVE-2018-1287.yml 38.6.0
2026-06-12T15:40:21.173357+00:00 GitLab Importer Affected by VCID-mb7a-bawu-7be6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.jmeter/ApacheJMeter/CVE-2018-1297.yml 38.6.0