CVE-2010-1871: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Published Aug 5, 2010 · Updated Jun 16, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Red Hat vulnerabilities
All Red Hat entriesCVE-2021-3560
Red Hat Polkit Incorrect Authorization Vulnerability
high7.8ExploitedFeb 16, 2022CVE-2021-4034
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
high7.8ExploitedJan 28, 2022CVE-2018-14667
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
critical9.8ExploitedNov 6, 2018CVE-2017-12149
Red Hat JBoss Application Server Remote Code Execution Vulnerability
critical9.8ExploitedOct 4, 2017CVE-2015-5287
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
high7.8ExploitedDec 7, 2015CVE-2015-3246
Red Hat Libuser Race Condition Vulnerability
high7.4ExploitedAug 11, 2015