CVE-2010-2474: Red Hat JBoss Enterprise Service Bus

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.

Affected products

• Red Hat JBoss Enterprise Service Bus: up to and including 4.7; version 4.0 only; version 4.2 only; version 4.2.1 only; version 4.3 only; version 4.4 only; …
• Red Hat JBoss Enterprise Soa Platform: version 4.2.0 only; version 4.3.0 only; version 5.0.0 only; version 5.0.1 only

Published 2010-08-10. Last modified 2026-06-16.