Vulnerabilities
Vulnerable Software
Apache:  >> Cassandra  Security Vulnerabilities
CVE-2016-3427
Known exploited
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVSS Score
9.8
EPSS Score
0.936
Published
2016-04-21
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.
CVSS Score
7.5
EPSS Score
0.009
Published
2015-04-03


Contact Us

Shodan ® - All rights reserved