[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYOh7Mk-eoBQKpwRpzCBVSjVoV9O2B66FHR_jQPxbwNQ":3,"g5a-risk:CVE-2019-12418":244},{"success":4,"data":5,"meta":242},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":84,"references":85,"referencesCount":150,"weaknesses":151,"weaknessesCount":27,"isActivelyExploited":155,"cisaInfo":26,"otxData":26,"relatedBlogPosts":156,"seoMetadata":157,"configurations":182,"relatedVendorCves":240,"notableEvents":241},"CVE-2019-12418","What is CVE-2019-12418?","When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.","When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without acces...","2019-12-23T18:15:10.753","2023-11-07T03:03:34.493",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED",null,1,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",4.4,3.4,6.4,0.01221,[39,39,39,39,39,39,39],"High",[43,48,53,56,59,64,67,70,75,80],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"oracle","workload_manager","12.2.0.1","cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":65,"criteria":66,"vulnerable":4},"18c","cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":68,"criteria":69,"vulnerable":4},"19c","cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":46,"criteria":83,"vulnerable":4},"netapp","oncommand_system_manager","cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*",10,[86,92,97,100,103,106,109,112,116,119,123,127,131,135,139,142,145],{"url":87,"source":88,"tags":89},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00013.html","Opensuse",[90,91],"Mailing List","Third Party Advisory",{"url":93,"source":94,"tags":95},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67%40%3Cannounce.tomcat.apache.org%3E","Apache",[90,96],"Vendor Advisory",{"url":98,"source":94,"tags":99},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",[],{"url":101,"source":94,"tags":102},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",[],{"url":104,"source":94,"tags":105},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",[],{"url":107,"source":94,"tags":108},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",[],{"url":110,"source":94,"tags":111},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fraba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",[],{"url":113,"source":114,"tags":115},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F01\u002Fmsg00024.html","Debian",[90,91],{"url":117,"source":114,"tags":118},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F03\u002Fmsg00029.html",[90,91],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FDec\u002F43","Seclists",[90,91],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202003-43","Gentoo",[91],{"url":128,"source":129,"tags":130},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200107-0001\u002F","Netapp",[91],{"url":132,"source":133,"tags":134},"https:\u002F\u002Fsupport.f5.com\u002Fcsp\u002Farticle\u002FK10107360?utm_source=f5support&amp%3Butm_medium=RSS","F5",[],{"url":136,"source":137,"tags":138},"https:\u002F\u002Fusn.ubuntu.com\u002F4251-1\u002F","Ubuntu",[91],{"url":140,"source":114,"tags":141},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4596",[91],{"url":143,"source":114,"tags":144},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4680",[91],{"url":146,"source":147,"tags":148},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2020.html","Oracle",[149,91],"Patch",17,[152],{"id":153,"name":153,"description":154},"Unknown","NVD-CWE-noinfo",false,[],{"title":158,"metaDescription":159,"keywords":160,"canonicalUrl":161,"structuredData":162},"What is CVE-2019-12418? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-12418, a high severity cyber security vulnerability from 2019. When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0...","CVE-2019-12418, CVE-2019-12418 vulnerability, CVE-2019-12418 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, apache security, debian security, oracle security, canonical security, opensuse security, netapp security, tomcat vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-12418",{"@context":163,"@type":164,"headline":158,"description":159,"datePublished":10,"dateModified":11,"author":165,"publisher":169,"about":173,"mainEntityOfPage":177,"articleSection":180,"keywords":181},"https:\u002F\u002Fschema.org","TechArticle",{"@type":166,"name":167,"url":168},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":166,"name":167,"url":168,"logo":170},{"@type":171,"url":172},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":174,"name":6,"description":175,"additionalType":176},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":178,"@id":179},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-12418","Cybersecurity","CVE-2019-12418, CVE-2019-12418 vulnerability, CVE-2019-12418 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[183,200,210,220,226,232],{"Operator":26,"Negate":26,"Nodes":184},[185],{"Operator":186,"Negate":26,"CPEMatch":187},"OR",[188,192,196],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":190,"VersionEndExcluding":26,"VersionEndIncluding":191},"6EF204D4-F525-4391-8BE2-8E110F2CC98F","7.0.0","7.0.97",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":194,"VersionEndExcluding":26,"VersionEndIncluding":195},"AF454438-4732-4232-9BEE-DFAFA6E355F7","8.5.0","8.5.47",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":198,"VersionEndExcluding":26,"VersionEndIncluding":199},"B511668B-A02B-4D1D-A8F5-EF9F6F086283","9.0.0","9.0.28",{"Operator":26,"Negate":26,"Nodes":201},[202],{"Operator":186,"Negate":26,"CPEMatch":203},[204,206,208],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":211},[212],{"Operator":186,"Negate":26,"CPEMatch":213},[214,216,218],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AD848FE1-CFD7-490C-B008-DF3B30F3256F",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"630C8E99-FE49-486E-9003-40B82809B7A3",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C842DE9E-5E12-4295-AFA5-DEB5FEDE490A",{"Operator":26,"Negate":26,"Nodes":221},[222],{"Operator":186,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",{"Operator":26,"Negate":26,"Nodes":227},[228],{"Operator":186,"Negate":26,"CPEMatch":229},[230],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":26,"Negate":26,"Nodes":233},[234],{"Operator":186,"Negate":26,"CPEMatch":235},[236],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":238,"VersionEndExcluding":26,"VersionEndIncluding":239},"34B80C9D-62AA-42FA-AB46-F8A414FCBE5E","3.0.0","3.1.3",[],[],{"lastModified":11,"cacheTime":243,"version":32},1792347786715,{"score":245,"band":246,"action":247,"scoredAt":248},45,"Medium","Plan remediation","2026-10-16T06:47:30.82181+00:00"]