AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-1871

HIGH · CVSS 8.8 EPSS 83.40% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-08-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2021-12-10

Required action: Apply updates per vendor instructions.

CVE
CVE-2010-1871
Severity
HIGH
CVSS
8.8
EPSS
83.40%
Linux Java

Original NVD Description

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.