Live › vulnerability › CVE-2010-1871
Go to dashboardJBoss Seam 2 as shipped in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux lets remote attackers execute code on the server. The flaw is only exploitable when the Java Security Manager is not properly configured, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Red Hat JBoss Seam 2 | vendor | – | – |
4.3.0 with jboss-seam2 is deployed, for example by looking for jboss-seam2 in the deployed application librariesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
This page as .md · .json · in your agent: get_signal("CVE-2010-1871")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.