{"vulnerability": "CVE-2015-2342", "sightings": [{"uuid": "2883c93e-0e45-44d2-87c4-e4ebb8b3ae77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "6254046e-6f61-4773-93c2-67e51607be58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:38.000000Z"}, {"uuid": "a8baf156-a25b-4101-b05c-15a5616d0e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_jmx_server.rb", "content": "", "creation_timestamp": "2018-12-19T19:19:52.000000Z"}, {"uuid": "677d65f6-5352-42c2-8f68-eb67747a6753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_jmx_server.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d6d285ef-07b8-43a9-9db5-7a7311c39364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-2342", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/36101", "content": "", "creation_timestamp": "2015-02-17T00:00:00.000000Z"}, {"uuid": "af4d57e2-0d4b-4db9-9295-0d243a83b3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_jmx_server.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rocktheboat\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Detect Java JMX endpoints\", \"disclosure_date\": \"2013-05-22\", \"fullname\": \"auxiliary/scanner/misc/java_jmx_server\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Java JMX Server Insecure Endpoint Code Execution Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/misc/java_jmx_server.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/misc/java_jmx_server\", \"references\": [\"URL-https://docs.oracle.com/javase/8/docs/technotes/guides/jmx/JMX_1_4_specification.pdf\", \"URL-https://www.optiv.com/blog/exploiting-jmx-rmi\", \"CVE-2015-2342\"], \"rport\": 1099, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:00.869156Z"}, {"uuid": "c6324419-9899-4841-842a-31f1226cf18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2342", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_jmx_server.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Braden Thomas\", \"juan vazquez \"], \"autofilter_ports\": [999, 1090, 1098, 1099, 1100, 1101, 1102, 1103, 1129, 1030, 1035, 1199, 1234, 1440, 3273, 3333, 3900, 2199, 2809, 5520, 5580, 5521, 5999, 6060, 6789, 6996, 7700, 7800, 7878, 7890, 7801, 8050, 8051, 8085, 8091, 8205, 8303, 8642, 8701, 8686, 8888, 8889, 8890, 8901, 8902, 8903, 8999, 9001, 9003, 9004, 9005, 9050, 9090, 9099, 9300, 9500, 9711, 9809, 9810, 9811, 9812, 9813, 9814, 9815, 9875, 9910, 9991, 9999, 10001, 10162, 10098, 10099, 11001, 11099, 11333, 12000, 13013, 14000, 15000, 15001, 15200, 16000, 17200, 18980, 20000, 23791, 26256, 31099, 33000, 32913, 37718, 45230, 47001, 47002, 50050, 50500, 50501, 50502, 50503, 50504], \"autofilter_services\": [\"rmi\", \"rmid\", \"java-rmi\", \"rmiregistry\"], \"check\": true, \"default_credential\": false, \"description\": \"This module takes advantage a Java JMX interface insecure configuration, which would\\n          allow loading classes from any remote (HTTP) URL. JMX interfaces with authentication\\n          disabled (com.sun.management.jmxremote.authenticate=false) should be vulnerable, while\\n          interfaces with authentication enabled will be vulnerable only if a weak configuration\\n          is deployed (allowing to use javax.management.loading.MLet, having a security manager\\n          allowing to load a ClassLoader MBean, etc.).\", \"disclosure_date\": \"2013-05-22\", \"fullname\": \"exploit/multi/misc/java_jmx_server\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Java JMX Server Insecure Configuration Java Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/misc/java_jmx_server.rb\", \"platform\": \"Java\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/misc/java_jmx_server\", \"references\": [\"URL-https://docs.oracle.com/javase/8/docs/technotes/guides/jmx/JMX_1_4_specification.pdf\", \"URL-https://www.optiv.com/blog/exploiting-jmx-rmi\", \"CVE-2015-2342\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Generic (Java Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:26.344868Z"}]}