CVE-2010-3857: Red Hat JBoss Business Rules Management System

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.

Affected products

• Red Hat JBoss Business Rules Management System: before 5.1.0 (fixed in 5.1.0)

Published 2019-11-12. Last modified 2026-06-16.