CVE-2015-2342 Code injection in n/a

What is CVE-2015-2342?

CVE-2015-2342 is a critical code injection vulnerability in Vmware Vcenter Server, published on 12 Oct 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Which versions are affected by CVE-2015-2342?

It affects 1 product.

Products include Vmware Vcenter Server.

How do I fix CVE-2015-2342?

No fix has been published for CVE-2015-2342 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2015-2342 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-2342 exists.

Public exploit code: 2 Metasploit modules and 1 Exploit-DB entry.

Other vulnerabilities in Vmware Vcenter Server

• CVE-2026-59310 Broadcom VMware vCenter Path Traversal Exploited Critical 9.8
• CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Exploited Critical 9.8
• CVE-2020-3952 VMware vCenter Server Information Disclosure Exploited Critical 9.8
• CVE-2021-22017 VMware vCenter Server Improper Access Control Exploited Medium 5.3
• CVE-2026-59309 vCenter authentication-bypass vulnerability Critical 9.8

All Vmware Vcenter Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w37r-rg6f-g7rh.