CVE-2018-1310

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability

published May 23, 2018

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03176 · 87.9th percentile
Published
2018-05-23T14:00Z
EPSS history
Timeline
  • 23 MAY 14:00Z
    Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability
    cvelistv5