CVE-2018-15764

CRITICAL 9.8CVE-2018-15764 · Published 28/09/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
esrs policy manager emc	`≤ 6.8`	No fix yet

Description

Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.

References

securityfocus.com/bid/105405 · Third Party Advisory
securitytracker.com/id/1041714 · Third Party Advisory
seclists.org/fulldisclosure/2018/Sep/47 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free