CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 83.4% chance of exploitation in the next 30 days.

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

Affected products

• Netapp Oncommand Balance: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Unified Manager: affected versions not specified
• Red Hat JBoss Enterprise Application Platform: version 4.3.0 only

Published 2010-08-05. Last modified 2026-06-16.