{"vulnerability": "cve-2010-1871", "sightings": [{"uuid": "6c9e0bfa-b56c-4830-8068-25a599bc04f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "MISP/5c5a3d7b-ba70-474a-bd8a-1b5a0a021402", "content": "", "creation_timestamp": "2019-02-06T01:53:29.000000Z"}, {"uuid": "f5823a11-77ad-4782-865c-e7510100d47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "eb845969-78f0-4335-86a7-f81b3c8f866b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971185", "content": "", "creation_timestamp": "2024-12-24T20:25:32.578246Z"}, {"uuid": "4e330e52-8300-405b-b7ce-b0929513e0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "d4cfa990-6f53-4c27-99f9-da5cc197a230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:00.000000Z"}, {"uuid": "a3ad568e-8b03-4432-be6a-7c85ffb5e4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:47.000000Z"}, {"uuid": "9a2720fd-e5c0-4452-aeb1-9544adce76fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b189c79e-a9a2-4172-bb23-dd8514b1458f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_seam_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "42149544-724e-4f89-905f-5ebf8d943386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2010-1871", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f2108db7-af18-448e-a25e-d2e9e86bd693", "content": "", "creation_timestamp": "2026-02-02T12:28:31.632224Z"}, {"uuid": "32905aa0-9ade-44c8-a27e-0a2fdccbf2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-1871", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/36653", "content": "", "creation_timestamp": "2015-04-06T00:00:00.000000Z"}, {"uuid": "ea61662c-f0a6-4631-9c21-570520cafff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "Telegram/QgxScpNLUl4qgtOkJ23ALYFDKulyzuUDQiTgs-lmOJmTOe7f", "content": "", "creation_timestamp": "2025-02-14T10:00:30.000000Z"}, {"uuid": "5747fa4c-4744-4ae4-97af-24044c841a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://t.me/arpsyndicate/1384", "content": "#ExploitObserverAlert\n\nCVE-2010-1871\n\nDESCRIPTION: Exploit Observer has 22 entries related to CVE-2010-1871. JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.\n\nFIRST-EPSS: 0.967740000\nNVD-IS: 6.4\nNVD-ES: 8.6", "creation_timestamp": "2023-12-05T03:59:16.000000Z"}, {"uuid": "5f042a8b-b957-4a05-88ce-6bc967b15b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://t.me/arpsyndicate/1553", "content": "#ExploitObserverAlert\n\nCVE-2010-1871\n\nDESCRIPTION: Exploit Observer has 22 entries related to CVE-2010-1871. JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.\n\nFIRST-EPSS: 0.967740000\nNVD-IS: 6.4\nNVD-ES: 8.6", "creation_timestamp": "2023-12-08T11:58:31.000000Z"}, {"uuid": "168ee82c-bb22-4996-894f-ad828a0196e2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/efb71866-eb4a-4bed-b056-a7240d90d3b7", "content": "", "creation_timestamp": "2026-06-19T12:47:43.213307Z"}, {"uuid": "c4bb8ace-171f-4b05-bd73-08cf65ae15ee", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ab7cf24-6807-408a-94e4-6b36bad1afb3", "content": "", "creation_timestamp": "2026-06-23T14:04:51.277960Z"}, {"uuid": "b4d2dfb0-9848-4946-a16e-b0fce33d2e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"guerrino di massa\", \"Cristiano Maruti \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform\\n          4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression\\n          Language (EL) expressions, which allows remote attackers to execute arbitrary code\\n          via a crafted URL. This modules also has been tested successfully against IBM\\n          WebSphere 6.1 running on iSeries.\\n\\n          NOTE: this is only a vulnerability when the Java Security Manager is not properly\\n          configured.\", \"disclosure_date\": \"2010-07-19\", \"fullname\": \"auxiliary/admin/http/jboss_seam_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"JBoss Seam 2 Remote Command Execution\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/jboss_seam_exec.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/jboss_seam_exec\", \"references\": [\"CVE-2010-1871\", \"OSVDB-66881\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:46.616830Z"}, {"uuid": "5a0b1dd6-ec0a-4fbd-8d74-73829a8f5b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_seam_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"vulp1n3 \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Versions of the JBoss Seam 2 framework < 2.2.1CR2 fails to properly\\n          sanitize inputs to some JBoss Expression Language expressions.  As a\\n          result, attackers can gain remote code execution through the\\n          application server.  This module leverages RCE to upload and execute\\n          a given payload.\\n\\n          Versions of the JBoss application server (AS) admin-console are\\n          known to be vulnerable to this exploit, without requiring authentication.\\n          Tested against JBoss AS 5 and 6, running on Linux with JDKs 6 and 7.\\n\\n          This module provides a more efficient method of exploitation - it\\n          does not loop to find desired Java classes and methods.\", \"disclosure_date\": \"2010-08-05\", \"fullname\": \"exploit/multi/http/jboss_seam_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"JBoss Seam 2 File Upload and Execute\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/jboss_seam_upload_exec.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"multi/http/jboss_seam_upload_exec\", \"references\": [\"CVE-2010-1871\", \"URL-https://bugzilla.redhat.com/show_bug.cgi?id=615956\", \"URL-http://blog.o0o.nu/2010/07/cve-2010-1871-jboss-seam-framework.html\", \"URL-http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:51.236199Z"}]}