CVE-2010-0738

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

CVSS 3.1

5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

74% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2022-05-25, due 2022-06-15, known ransomware use

CWE

CWE-749

Published

2010-04-28

Modified

2026-10-02

Record from

the NVD, synced 2026-10-19

Affected

• redhat:jboss_enterprise_application_platform

References

• http://marc.info/?l=bugtraq&m=132129312609324&w=2
• http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=35
• http://secunia.com/advisories/39563
• http://securityreason.com/securityalert/8408
• http://securitytracker.com/id?1023918

Check your stackJSON