CVE-2010-1871

Fixed in a distro release ExploitedEPSS 83%CVSS 8.8

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

Published 2010-08-04 · In CISA KEV since 2021-12-10 · CVE record · OSV

Products: redhat jboss_enterprise_application_platform, netapp oncommand_balance, netapp oncommand_insight, netapp oncommand_unified_manager

Distro releases