AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-12120

HIGH · CVSS 8.1 EPSS 4.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-11-28 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.1. It affects Java. It may be remotely exploitable.

CVE
CVE-2018-12120
Severity
HIGH
CVSS
8.1
EPSS
4.28%
Java

Original NVD Description

Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as `node --debug=localhost`. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable.

Related CVEs

Other vulnerabilities affecting the same vendor(s)