org.apache.geronimo.framework/geronimo-jmx-remoting vulnerabilities

Latest org.apache.geronimo.framework/geronimo-jmx-remoting CVEs

Newest publication first

1. CVE-2013-1777 Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1

   Published 2013-07-11

   High·CVSS 10.0 EPSS 9.8%

   The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.