JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to achieve arbitrary code execution via crafted URL parameters when the Java Security Manager is misconfigured.
Java
Red Hat
RCE
NVD
Exploit-DB
VulDB
CVSS 3.1
8.8
EPSS
93.7%
Threat
9.6