AttackerKBAKB:582F462C-BCA8-4264-84F4-F61E160A4CDACVE-2010-1871
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.965 High
EPSS
Percentile
99.4%
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Recent assessments:
Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0
References
archives.neohapsis.com/archives/bugtraq/2013-05/0117.html
www.redhat.com/support/errata/RHSA-2010-0564.html
www.securityfocus.com/bid/41994
www.securitytracker.com/id?1024253
www.vupen.com/english/advisories/2010/1929
bugzilla.redhat.com/show_bug.cgi?id=615956
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1871
exchange.xforce.ibmcloud.com/vulnerabilities/60794
security.netapp.com/advisory/ntap-20161017-0001
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.965 High
EPSS
Percentile
99.4%