{"schema":"threatline.record/2","record":{"id":"CVE-2010-1871","aliases":[],"summary":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","details":"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.","categories":["Operating systems"],"product":"JBoss Seam 2","vendor":"Red Hat","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2010-1871","source_modified_at":"2025-10-22T00:05:51.923Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2021-12-10","due_date":"2022-06-10","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.83397,"percentile":0.99684,"score_date":"2026-10-23"},"published_at":"2010-08-04T19:00:00.000Z","modified_at":"2025-10-22T00:05:51.923Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2010-1871","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-22T00:05:51.923Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_seam_upload_exec.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-08-05"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-07-19"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/36653","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-04-06"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-1871","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1871","source":"CISA KEV"},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=615956","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60794","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"source":"CVE List","url":"https://security.netapp.com/advisory/ntap-20161017-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1871","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-02-10T19:33:04.339981Z"},"exploits":[{"source":"Metasploit","kind":"Exploit module","name":"JBoss Seam 2 File Upload and Execute","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_seam_upload_exec.rb","date":"2010-08-05","added":"2026-04-02","check":true},{"source":"Metasploit","kind":"Auxiliary module","name":"JBoss Seam 2 Remote Command Execution","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb","date":"2010-07-19","added":"2025-05-16","check":false},{"source":"Exploit-DB","kind":"Remote exploit","name":"JBoss Seam 2 - Arbitrary File Upload / Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/36653","date":"2015-04-06","added":"2015-04-06","verified":true}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-22T00:05:51.923Z","content_hash":"e9d0bf36abcef8097f4b9f274cf156e6585b72c9d5b415b25e9f1655d118fd90"}}