Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jun 15, 2022

CVE-2010-0738

High
EPSS 90.9%CISA KEVRansomware
Red Hat/JBoss

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

EPSS — Exploit Probability

90.9%

Higher than 99.6% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2010-0738

Risk Assessment

CRITICAL
In CISA KEV
High EPSS
Ransomware

Details

Severity
High
EPSS
90.9%
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

May 25, 2022

Added to KEV

May 25, 2022

Remediation Due

Jun 15, 2022

Affected Product

Red Hat

JBoss

View all Red Hat CVEs