{"schemaVersion":3,"id":"CVE-2010-1871","aliases":["RHSA-2010:0564"],"status":"published","duplicateOf":null,"title":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","description":"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.","dates":{"published":"2010-08-04T19:00:00.000Z","modified":"2025-10-22T00:05:51.923Z","reserved":null,"kevAdded":["2021-12-10T00:00:00.000Z"],"kevDue":["2022-06-10T00:00:00.000Z"]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.83397,"percentile":0.99681,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.83397},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.83397,"percentile":0.99681}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.83397,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.83397,"percentile":0.99681}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-12-10T00:00:00.000Z","dueDate":"2022-06-10T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","description":"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2010-1871","label":"nvd.nist.gov/vuln/detail/CVE-2010-1871"}],"vendor":"Red Hat","product":"JBoss Seam 2","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-12-10T00:00:00.000Z","dueDate":"2022-06-10T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","description":"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2010-1871","label":"nvd.nist.gov/vuln/detail/CVE-2010-1871"}],"vendor":"Red Hat","product":"JBoss Seam 2","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"36653","name":"JBoss Seam 2 - Arbitrary File Upload / Execution (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/36653","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["jsp"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"jsp","file":"exploits/jsp/remote/36653.rb","codes":["CVE-2010-1871","OSVDB-66881"]},"metasploit":null},{"id":"MSF_AUXILIARY_ADMIN_HTTP_JBOSS_SEAM_EXEC","name":"JBoss Seam 2 Remote Command Execution","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"auxiliary/admin/http/jboss_seam_exec","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["crash-safe"],"sideEffects":["ioc-in-logs"],"reliability":[]}},{"id":"MSF_EXPLOIT_MULTI_HTTP_JBOSS_SEAM_UPLOAD_EXEC","name":"JBoss Seam 2 File Upload and Execute","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/jboss_seam_upload_exec.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/http/jboss_seam_upload_exec","rank":"300","rankName":"normal","postAuth":false,"check":true,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":3,"weaknesses":[{"id":"CWE-917","name":"Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')","description":"The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/917.html"}],"affected":[{"vendor":"netapp","product":"oncommand_balance","name":"oncommand balance","label":"oncommand_balance","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_balance"},{"vendor":"netapp","product":"oncommand_insight","name":"oncommand insight","label":"oncommand_insight","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_insight"},{"vendor":"netapp","product":"oncommand_unified_manager","name":"oncommand unified manager","label":"oncommand_unified_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/oncommand_unified_manager"},{"vendor":"redhat","product":"jboss_enterprise_application_platform","name":"jboss enterprise application platform","label":"jboss_enterprise_application_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.3.0","eol":null,"hubHref":"/vendor/redhat/jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss-seam2","name":"jboss-seam2","label":"jboss-seam2","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam2","purlType":"rpm","versions":[{"text":"< 0:2.0.2.FP-1.ep1.24.el4","noFixRecorded":false,"fixedIn":null},{"text":"< 0:2.0.2.FP-1.ep1.24.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.2.FP-1.ep1.24.el4 | < 0:2.0.2.FP-1.ep1.24.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam2-docs","name":"jboss-seam2-docs","label":"jboss-seam2-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam2-docs","purlType":"rpm","versions":[{"text":"< 0:2.0.2.FP-1.ep1.24.el4","noFixRecorded":false,"fixedIn":null},{"text":"< 0:2.0.2.FP-1.ep1.24.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.2.FP-1.ep1.24.el4 | < 0:2.0.2.FP-1.ep1.24.el5","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/41994","label":"www.securityfocus.com/bid/41994","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html","label":"archives.neohapsis.com/archives/bugtraq/2013-05/0117.html","hostname":"archives.neohapsis.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link"]},{"url":"http://www.securitytracker.com/id?1024253","label":"www.securitytracker.com/id?1024253","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1929","label":"www.vupen.com/english/advisories/2010/1929","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=615956","label":"bugzilla.redhat.com/show_bug.cgi?id=615956","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","REPORT"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60794","label":"exchange.xforce.ibmcloud.com/vulnerabilities/60794","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0564.html","label":"www.redhat.com/support/errata/RHSA-2010-0564.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"https://security.netapp.com/advisory/ntap-20161017-0001/","label":"security.netapp.com/advisory/ntap-20161017-0001/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1871","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1871","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0564","label":"access.redhat.com/errata/RHSA-2010:0564","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0564.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0564.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1871","label":"access.redhat.com/security/cve/CVE-2010-1871","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1871","label":"www.cve.org/CVERecord?id=CVE-2010-1871","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1871","label":"nvd.nist.gov/vuln/detail/CVE-2010-1871","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-08-04T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2021-12-10T00:00:00.000Z","label":"Added to CISA KEV","detail":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-06-10T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-22T00:05:51.923Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T22:17:18.026Z","stale":false,"partial":false}}