Known Exploited Vulnerabilities May 25, 2022 · CISA KEV Catalog

CVE-2010-1428: Red Hat JBoss Information Disclosure Vulnerability

Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2010-1428 Red Hat
Related: CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Aug 26, 2026
CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability Known Exploited Vulnerabilities · Aug 26, 2026
CVE-2018-14667: Red Hat JBoss Rich Faces Framework Expression Language Injection Vulnerability Known Exploited Vulnerabilities · Sep 28, 2023