CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-0225

The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2015-0225

Apache » Cassandra » Version: 1.2.0

cpe:2.3:a:apache:cassandra:1.2.0
Apache » Cassandra » Version: 1.2.1

cpe:2.3:a:apache:cassandra:1.2.1
Apache » Cassandra » Version: 1.2.10

cpe:2.3:a:apache:cassandra:1.2.10
Apache » Cassandra » Version: 1.2.11

cpe:2.3:a:apache:cassandra:1.2.11
Apache » Cassandra » Version: 1.2.12

cpe:2.3:a:apache:cassandra:1.2.12
Apache » Cassandra » Version: 1.2.13

cpe:2.3:a:apache:cassandra:1.2.13
Apache » Cassandra » Version: 1.2.14

cpe:2.3:a:apache:cassandra:1.2.14
Apache » Cassandra » Version: 1.2.15

cpe:2.3:a:apache:cassandra:1.2.15
Apache » Cassandra » Version: 1.2.16

cpe:2.3:a:apache:cassandra:1.2.16
Apache » Cassandra » Version: 1.2.17

cpe:2.3:a:apache:cassandra:1.2.17
Apache » Cassandra » Version: 1.2.18

cpe:2.3:a:apache:cassandra:1.2.18
Apache » Cassandra » Version: 1.2.19

cpe:2.3:a:apache:cassandra:1.2.19
Apache » Cassandra » Version: 1.2.2

cpe:2.3:a:apache:cassandra:1.2.2
Apache » Cassandra » Version: 1.2.3

cpe:2.3:a:apache:cassandra:1.2.3
Apache » Cassandra » Version: 1.2.4

cpe:2.3:a:apache:cassandra:1.2.4
Apache » Cassandra » Version: 1.2.5

cpe:2.3:a:apache:cassandra:1.2.5
Apache » Cassandra » Version: 1.2.6

cpe:2.3:a:apache:cassandra:1.2.6
Apache » Cassandra » Version: 1.2.7

cpe:2.3:a:apache:cassandra:1.2.7
Apache » Cassandra » Version: 1.2.8

cpe:2.3:a:apache:cassandra:1.2.8
Apache » Cassandra » Version: 1.2.9

cpe:2.3:a:apache:cassandra:1.2.9
Apache » Cassandra » Version: 2.0.0

cpe:2.3:a:apache:cassandra:2.0.0
Apache » Cassandra » Version: 2.0.1

cpe:2.3:a:apache:cassandra:2.0.1
Apache » Cassandra » Version: 2.0.10

cpe:2.3:a:apache:cassandra:2.0.10
Apache » Cassandra » Version: 2.0.11

cpe:2.3:a:apache:cassandra:2.0.11
Apache » Cassandra » Version: 2.0.12

cpe:2.3:a:apache:cassandra:2.0.12
Apache » Cassandra » Version: 2.0.13

cpe:2.3:a:apache:cassandra:2.0.13
Apache » Cassandra » Version: 2.0.2

cpe:2.3:a:apache:cassandra:2.0.2
Apache » Cassandra » Version: 2.0.3

cpe:2.3:a:apache:cassandra:2.0.3
Apache » Cassandra » Version: 2.0.4

cpe:2.3:a:apache:cassandra:2.0.4
Apache » Cassandra » Version: 2.0.5

cpe:2.3:a:apache:cassandra:2.0.5
Apache » Cassandra » Version: 2.0.6

cpe:2.3:a:apache:cassandra:2.0.6
Apache » Cassandra » Version: 2.0.7

cpe:2.3:a:apache:cassandra:2.0.7
Apache » Cassandra » Version: 2.0.8

cpe:2.3:a:apache:cassandra:2.0.8
Apache » Cassandra » Version: 2.0.9

cpe:2.3:a:apache:cassandra:2.0.9
Apache » Cassandra » Version: 2.1.0

cpe:2.3:a:apache:cassandra:2.1.0
Apache » Cassandra » Version: 2.1.1

cpe:2.3:a:apache:cassandra:2.1.1
Apache » Cassandra » Version: 2.1.2

cpe:2.3:a:apache:cassandra:2.1.2
Apache » Cassandra » Version: 2.1.3

cpe:2.3:a:apache:cassandra:2.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-0225

Products

Pricing

Contact Us