Summary
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.
- Vendor
- Red Hat
- Product
- JBoss Seam 2
- Added to KEV
- Dec 10, 2021
- Remediation due
- Jun 10, 2022 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-20
- EPSS
- 83.4% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References