Java RMI / JMX

What are Java RMI and JMX?
RMI exposes remote Java objects. JMX often rides over RMI to provide management and monitoring surfaces.

Common security issues

• Unauthenticated or weakly authenticated JMX management endpoints

• Remote invocation surfaces enabling high-impact control paths

• Unsafe Java object handling patterns on exposed endpoints

• Management planes reachable from user networks instead of admin-only segments