CyberSec.Space Logo
返回 CVE 浏览器

CVE-2010-1871

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score41.9360%
EPSS Percentile85.75th
Published2010年8月5日
Last Modified2026年4月22日

Vulnerability Description

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

Affected Platforms (CPE)

📦
Redhat

Jboss Enterprise Application Platform

= 4.3.0
📦
Netapp

Oncommand Balance

All versions
📦
Netapp

Oncommand Insight

All versions
📦
Netapp

Oncommand Unified Manager

All versions

References & Advisories

相关漏洞威胁