CVE-2015-2342: vmware vcenter_server

EPSS trend

Probability

89.05%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 89.05% on 19-09-2026

19-09-202619-10-2026

EPSS score

89.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotejavaVerified
Java JMX - Server Insecure Configuration Java Code Execution (Metasploit)
Maturity: weaponized
MetasploitremoteUnverified
Java JMX Server Insecure Endpoint Code Execution Scanner
auxiliary/scanner/misc/java_jmx_server
Maturity: poc
MetasploitremoteVerified
Java JMX Server Insecure Configuration Java Code Execution
exploit/multi/misc/java_jmx_server
Maturity: weaponized

References

6 links

seclists.org/fulldisclosure/2015/Oct/1Mailing ListX Refsource FULLDISC
www.securitytracker.com/id/1033720VDB EntryX Refsource SECTRACK
www.zerodayinitiative.com/advisories/ZDI-15-455X Refsource MISC
www.securityfocus.com/bid/76930VDB EntryX Refsource BID
www.7elements.co.uk/resources/…X Refsource MISC
www.vmware.com/security/advisories/VMSA-2015-0007.htmlX Refsource CONFIRMPatchVendor Advisory

Related vulnerabilities

CVE-2013-1659vmwareesxi+21.82%13y ago22-02-2013 20:00VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.CVE-2013-1405vmwareesx+52.80%13y ago15-02-2013 11:00VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2013-5971vmwarevcenter_server2.02%13y ago21-10-2013 10:00Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.CVE-2025-41225vmwarecloud_foundation+30.26%1y ago20-05-2025 14:24The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server.CVE-2025-41228vmwarecloud_foundation+40.90%1y ago20-05-2025 14:24VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal cookies or redirect to malicious websites.CVE-2012-6326vmwarevcenter_server+11.33%13y ago22-02-2013 20:00VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.

All vulnerabilities invcenter_server

CVE-2015-2342: vmware vcenter_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References