Dashboard / CVE-2010-0738

CVE-2010-0738

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

CISA Known Exploited Vulnerability

Vendor / Product Red Hat — JBoss
Date Added 2022-05-25
Remediation Due 2022-06-15
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2010-0738

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
redhat jboss_enterprise_application_platform 4.2.0
redhat jboss_enterprise_application_platform 4.3.0

References & Advisories (14)

http://secunia.com/advisories/39563
Broken Link Vendor Advisory
http://securitytracker.com/id?1023918
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/39710
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links