...
Do not start the JVM with any agents enabled on a production machine. This compliant solution removes the -agentlib command line argument and installs a security manager, as required by guideline rule ENV02-J. Create a secure sandbox using a Security Manager.
...
Search for vulnerabilities resulting from the violation of this guideline rule on the CERT website.
Bibliography
...