Jolokia

Jolokia is a JMX-HTTP bridge giving an alternative to JSR-160 connectors. It is an agent based approach with support for many platforms. In addition to basic JMX operations it enhances JMX remoting with unique features like bulk requests and fine grained security policies.

Official Site:

https://jolokia.org/

Severity Summary:

High: 1 Medium: 2

Reference

Title

Severity

CVE-2018-10899

Jolokia Cross-Site Request Forgery (CSRF) Vulnerability

High

CVE-2018-1000129

Jolokia Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2014-0168

Jolokia Cross-Site Request Forgery (CSRF) Vulnerability

Medium