VMware Gemfire vulnerabilities

2 CVEs affecting VMware Gemfire, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5396, published 2020-07-31.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-5396, published 2020-07-31. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service…
• CVE-2019-11286, published 2020-07-31. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network…