{"vulnerability": "CVE-2015-8103", "sightings": [{"uuid": "f31e18c6-b289-4420-801a-efb4ed3a4dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "exploited", "source": "https://www.exploit-db.com/exploits/38983", "content": "", "creation_timestamp": "2015-12-15T00:00:00.000000Z"}, {"uuid": "13894bd6-c32b-4b98-92bb-9f16998622e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "84b00308-7c61-4c7e-b3a4-ab80b39c4277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:43.000000Z"}, {"uuid": "bd15c6b2-ea19-4d36-ab3a-da23d06dc5f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jenkins_command.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7437d521-8b8b-4ca4-9ac6-5827a2826199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/opennms_java_serialize.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "19ed89d5-3ce9-4c89-abe2-9bb4f340a946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/jenkins_java_deserialize.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8fd30677-0f6f-4fb5-95bf-28393cb885f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://t.me/arpsyndicate/1747", "content": "#ExploitObserverAlert\n\nCVE-2015-8103\n\nDESCRIPTION: Exploit Observer has 66 entries related to CVE-2015-8103. The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the \"Groovy variant in 'ysoserial'\".\n\nFIRST-EPSS: 0.393800000\nNVD-IS: 6.4\nNVD-ES: 10.0", "creation_timestamp": "2023-12-11T13:47:19.000000Z"}, {"uuid": "fac78240-9e31-49d5-87dd-ea8946746a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://t.me/ctinow/164844", "content": "https://ift.tt/LEQ8NZM\nCVE-2015-8103 Exploit", "creation_timestamp": "2024-01-09T08:16:09.000000Z"}, {"uuid": "c5566f12-054b-4bdc-91b6-0452b68a8886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jenkins_command.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"altonjx\", \"Jeffrey Cap\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module scans for unauthenticated Jenkins-CI script consoles and\\n          executes the specified command.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/jenkins_command\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Jenkins-CI Unauthenticated Script-Console Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/jenkins_command.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/jenkins_command\", \"references\": [\"CVE-2015-8103\", \"URL-https://www.jenkins.io/security/advisory/2015-11-11/\", \"URL-https://www.pentestgeek.com/penetration-testing/hacking-jenkins-servers-with-no-password/\", \"URL-https://www.jenkins.io/doc/book/managing/script-console/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:35.339123Z"}, {"uuid": "8a95248a-6e97-4c17-84a4-b08275559e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/opennms_java_serialize.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ben Turner \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the OpenNMS Java object which allows\\n          an unauthenticated attacker to run arbitrary code against the system.\", \"disclosure_date\": \"2015-11-06\", \"fullname\": \"exploit/linux/misc/opennms_java_serialize\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"OpenNMS Java Object Unserialization Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/opennms_java_serialize.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/misc/opennms_java_serialize\", \"references\": [\"CVE-2015-8103\", \"URL-http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/\"], \"rport\": 1099, \"session_types\": false, \"targets\": [\"OpenNMS / Linux x86\", \"OpenNMS / Linux x86_64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.615321Z"}, {"uuid": "d2bc6701-a589-4b7a-a965-cd2dfc4c0a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/jenkins_java_deserialize.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Christopher Frohoff\", \"Steve Breen\", \"Dev Mohanty\", \"Louis Sato\", \"wvu \", \"juan vazquez \", \"Wei Chen\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Jenkins. An unsafe deserialization bug exists on\\n          the Jenkins master, which allows remote arbitrary code execution. Authentication is not\\n          required to exploit this vulnerability.\", \"disclosure_date\": \"2015-11-18\", \"fullname\": \"exploit/linux/misc/jenkins_java_deserialize\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"Jenkins CLI RMI Java Deserialization Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/jenkins_java_deserialize.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/misc/jenkins_java_deserialize\", \"references\": [\"CVE-2015-8103\", \"URL-https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/jenkins.py\", \"URL-https://github.com/frohoff/ysoserial/blob/master/src/main/java/ysoserial/payloads/CommonsCollections1.java\", \"URL-http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability\", \"URL-https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11\"], \"rport\": \"8080\", \"session_types\": false, \"targets\": [\"Jenkins 1.637\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:17.617266Z"}]}