← Global Threat Landscape

CVE-2010-0738

CWE-749

High

76.6

RPS

Description

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

Source: NVD

Signals

CVSS
5.3
Medium · v3.1
EPSS
79.58%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since May 2022
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-749
Published
28 Apr 2010
Last modified 2 Oct 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2010-0738

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time