← CVE Radar
CVE-2010-1871Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
8.8 HIGHEPSS 83.39%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 6.8 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Jun 10, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2010-1871
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Aug 5, 2010
- Last modified
- 2026-06-16 23:19 UTC
Affected Products
From NVD CPE configurations.
redhatjboss enterprise application platform1 version range
- 4.3.0
netapponcommand balance0 version ranges
No version detail published.
netapponcommand insight0 version ranges
No version detail published.
netapponcommand unified manager0 version ranges
No version detail published.
References
- archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2010-0564.html
- securityfocus.com http://www.securityfocus.com/bid/41994
- securitytracker.com http://www.securitytracker.com/id?1024253
- vupen.com http://www.vupen.com/english/advisories/2010/1929
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=615956
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/60794
- security.netapp.com https://security.netapp.com/advisory/ntap-20161017-0001/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1871