CVE-2015-2342
VMware vCenter Server <6.0 - RCE
Title source: llmDescription
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotejava
https://www.exploit-db.com/exploits/36101
metasploit
SCANNER
by rocktheboat · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/java_jmx_server.rb
metasploit
WORKING POC
EXCELLENT
by Braden Thomas, juan vazquez · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/java_jmx_server.rb
References (6)
Scores
EPSS
0.9203
EPSS Percentile
99.7%
Details
Status
published
Products (4)
vmware/vcenter_server
5.0
vmware/vcenter_server
5.1
vmware/vcenter_server
5.5
vmware/vcenter_server
6.0
Published
Oct 12, 2015
Tracked Since
Feb 18, 2026