CVE-2018-1000130

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server

published March 14, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73976 · 99.5th percentile
Published
2018-03-14T13:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 73% → 47%
    epss
  • 06 SEP 03:11Z
    EPSS moved 73% → 47%
    epss
  • 30 AUG 16:00Z
    EPSS moved 47% → 73%
    epss
  • 29 AUG 04:29Z
    EPSS moved 73% → 47%
    epss
  • 14 MAR 13:00Z
    A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server
    cvelistv5