Threat operations/Vulnerabilities / CVE activity
AL
Member accessPublic view · sign in
How threat priority works

CVSS gives technical context. It never enters the VTP threat score. Public exploitation evidence and observations from your honeypots are separate facts.

Vulnerability threat dossier

CVE-2010-0738

redhatjboss enterprise application platform

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

VTP deterministic threat65.9of 100 · CVSS excluded

VTP analyst assessment

JBoss JMX-Console authentication bypass remains known exploited

AI-assisted analytical recommendationDoes not set factual exploitation state
AI review stateCANDIDATE CREATED
AI priorityMEDIUM
AI confidence96%
Public exploitation · VTP factKEV

Assessment

CVE-2010-0738 lets remote attackers bypass JBoss JMX-Console method-based access controls by using an HTTP method other than GET or POST. CISA and ENISA list known exploitation, and public exploit-oriented templates are available.

Why it matters

  • A reachable vulnerable JMX-Console gives attackers an access-control bypass opportunity.
  • This can allow unauthorized actions through the application's GET handler.
  • If you use JBoss EAP 4.2 or 4.3, apply the applicable cumulative patch and remove JMX-Console from untrusted networks.

Evidence

3 record references and 3 source references passed trusted post-response validation. The current deterministic record contains 1 independent evidence group.

Uncertainties

First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.

Next watchpoint

If you operate legacy JBoss EAP, identify JMX-Console exposure and restrict it immediately.

AI baseline history (3)
  1. BASELINE ASSESSED
    JBoss JMX-Console authentication bypass remains known exploitedgpt-5.6-terra · low
  2. BASELINE ASSESSED
    JBoss JMX Console method-based authentication bypassgpt-5.6-terra · low
  3. BASELINE ASSESSED
    JBoss JMX Console authentication bypassgpt-5.6-terra · low

Previous AI priority: HIGH → current: MEDIUM. Inspect the evidence preserved for each run before treating this as a threat transition.

Technical severityMEDIUMCVSS 5.3 · technical context
Public exploitationKEVGlobal public evidence
Exploit maturityPOCReliability not implied
EPSS0.75100th percentile · prediction
Evidence confidence95%Strongest independent active claim
VelocitySTABLEMaterial events only
First-party telemetryFirst-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.
Availability: SENSOR_ONLINE_NO_MATCHING_ACTIVITY · Evidence: UNKNOWN
01

VTP deterministic assessment

Why this matters

  1. 01

    CISA KEV lists this vulnerability as known to be exploited globally.

  2. 02

    A proof of concept is reported; functional reliability is not established.

  3. 03

    EPSS is 0.75; this is predictive context, not exploitation evidence.

  4. 04

    First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.

02

Material change ledger

What changed

EXPLOIT TEMPLATE AVAILABLEPublic exploit-oriented template available
EXPLOIT TEMPLATE AVAILABLEPublic exploit-oriented template available
EXPLOIT TEMPLATE AVAILABLEPublic exploit-oriented template available
KEV ADDEDCISA KEV entry added
03

Claim provenance

Evidence and source independence

4publications detected
4underlying evidence chains

1 primary sources · 0 dependent secondary reports · 0 reports with unresolved independence. Repetition remains visible without multiplying confirmation.

Source claimEXPLOIT TEMPLATE AVAILABLEPUBLIC EXPLOIT TEMPLATE
90%claim confidence
PRIMARYcorpus:NUCLEI:98ad1e0e66c342e29da9863ff5c632ad3bc2ecb1ACTIVE
Evidence
Source claimEXPLOIT TEMPLATE AVAILABLEPUBLIC EXPLOIT TEMPLATE
90%claim confidence
PRIMARYcorpus:NUCLEI:3de629d823bb6eb00aa3769edc365b6525134fb1RETIRED
Evidence
Source claimEXPLOIT TEMPLATE AVAILABLEPUBLIC EXPLOIT TEMPLATE
90%claim confidence
PRIMARYcorpus:OPENVAS_NASL:689bca9334ff6e2a8c46ba0396d1117afe0058f0ACTIVE
Source claimACTIVE EXPLOITATIONENISA EU KEV LISTED
95%claim confidence
INDEPENDENTcatalog:enisa-eu-kev:CVE-2010-0738ACTIVE
Evidence
04

Event history

Threat timeline

  1. 03:3116 Oct
    EXPLOIT TEMPLATE AVAILABLE

    Public exploit-oriented template available

    ProjectDiscovery nuclei-templates published new or materially changed exploit-oriented tooling for this CVE. This is availability evidence, not evidence of exploitation in the wild.

  2. 06:1115 Oct
    EXPLOIT TEMPLATE AVAILABLE

    Public exploit-oriented template available

    ProjectDiscovery nuclei-templates published new or materially changed exploit-oriented tooling for this CVE. This is availability evidence, not evidence of exploitation in the wild.

  3. 02:3230 Sept
    EXPLOIT TEMPLATE AVAILABLE

    Public exploit-oriented template available

    Greenbone Community Feed published new or materially changed exploit-oriented tooling for this CVE. This is availability evidence, not evidence of exploitation in the wild.

  4. 00:0025 May
    KEV ADDED

    CISA KEV entry added

    CISA lists global known exploitation. This is not a VTP sensor observation.

  5. 00:0025 May
    ACTIVE EXPLOITATION

    ENISA EU KEV entry added

    ENISA EU KEV reports known exploitation. VTP imported this historical entry as source baseline. This is public intelligence, not a VTP sensor observation.

05

Original publications

Source record

ProjectDiscovery nuclei-templatesEXPLOIT INTELLIGENCEPRIMARY

Exploit tooling coverage changed for 2 CVEs

ProjectDiscovery nuclei-templates recorded exploit-tooling coverage changes for 2 CVEs in this pinned revision. 2 have an active availability assertion for this revision. Tooling evidence does not establish exploitation in the wild or successful execution.

CVE-2010-0738CVE-2026-21589
Separate evidence group
Original
ProjectDiscovery nuclei-templatesEXPLOIT INTELLIGENCEPRIMARY

Exploit tooling coverage changed for 2 CVEs

ProjectDiscovery nuclei-templates recorded exploit-tooling coverage changes for 2 CVEs in this pinned revision. 2 have an active availability assertion for this revision. Tooling evidence does not establish exploitation in the wild or successful execution.

CVE-2010-0738CVE-2026-18143
Separate evidence group
Original
Greenbone Community FeedEXPLOIT INTELLIGENCEPRIMARY

Exploit tooling coverage changed for 146 CVEs

Greenbone Community Feed recorded exploit-tooling coverage changes for 146 CVEs in this pinned revision. 146 have an active availability assertion for this revision. Tooling evidence does not establish exploitation in the wild or successful execution.

CVE-2006-2861CVE-2008-2902CVE-2008-5949CVE-2009-20006CVE-2009-2037CVE-2009-2223CVE-2009-3306CVE-2009-4085CVE-2009-4221CVE-2009-4222CVE-2009-4422CVE-2009-4530CVE-2009-4535CVE-2009-4609CVE-2009-4610CVE-2009-4611CVE-2009-4612CVE-2009-4680CVE-2009-4681CVE-2009-4723CVE-2009-4747CVE-2009-4925CVE-2009-4939CVE-2009-4943CVE-2009-4945CVE-2009-4977CVE-2009-4978CVE-2009-4982CVE-2009-4992CVE-2009-4993CVE-2010-0432CVE-2010-0684CVE-2010-0714CVE-2010-0738CVE-2010-0948CVE-2010-0956CVE-2010-0976CVE-2010-0984CVE-2010-10013CVE-2010-1003CVE-2010-1043CVE-2010-1050CVE-2010-1051CVE-2010-1052CVE-2010-1244CVE-2010-1268CVE-2010-1342CVE-2010-1351CVE-2010-1428CVE-2010-1429CVE-2010-1466CVE-2010-1467CVE-2010-1497CVE-2010-1537CVE-2010-1587CVE-2010-1737CVE-2010-1748CVE-2010-1872CVE-2010-1918CVE-2010-1920CVE-2010-1921CVE-2010-1926CVE-2010-1927CVE-2010-1928CVE-2010-1934CVE-2010-1935CVE-2010-1936CVE-2010-1944CVE-2010-1945CVE-2010-1946CVE-2010-1947CVE-2010-1999CVE-2010-20059CVE-2010-20109CVE-2010-2032CVE-2010-2043CVE-2010-2078CVE-2010-2079CVE-2010-2095CVE-2010-2096CVE-2010-2154CVE-2010-2263CVE-2010-2333CVE-2010-2358CVE-2010-2616CVE-2010-2617CVE-2010-2618CVE-2010-2620CVE-2010-2669CVE-2010-2673CVE-2010-2717CVE-2010-2718CVE-2010-2719CVE-2010-2720CVE-2010-2797CVE-2010-2846CVE-2010-2847CVE-2010-2848CVE-2010-2849CVE-2010-2854CVE-2010-2855CVE-2010-3003CVE-2010-3029CVE-2010-3070CVE-2010-3077CVE-2010-3286CVE-2010-3313CVE-2010-3314CVE-2010-3418CVE-2010-3459CVE-2010-3460CVE-2010-3462CVE-2010-3480CVE-2010-3481CVE-2010-3489CVE-2010-3514CVE-2010-3688CVE-2010-3694CVE-2010-4055CVE-2010-4056CVE-2010-4057CVE-2010-4097CVE-2010-4185CVE-2010-4278CVE-2010-4279CVE-2010-4280CVE-2010-4281CVE-2010-4282CVE-2010-4283CVE-2010-4348CVE-2010-4349CVE-2010-4350CVE-2010-4406CVE-2010-4598CVE-2010-4607CVE-2010-4608CVE-2010-4769CVE-2010-4800CVE-2010-4801CVE-2010-4810CVE-2010-4858CVE-2010-4877CVE-2010-4883CVE-2010-4917CVE-2010-5284CVE-2010-5285
Separate evidence group
ENISA European Vulnerability DatabaseAUTHORITATIVEINDEPENDENT

ENISA EU KEV catalog membership for CVE-2010-0738

ENISA EU KEV lists this vulnerability as known to be exploited. This is public intelligence, not a VTP sensor observation.

CVE-2010-0738
Separate evidence group
Original
06

Technical vulnerability data

Context, not threat proof

VTP threat score65.9vtp-threat-v1-public
Public exploitation30 / 30
EPSS prediction14.94 / 20
Exploit availability7.5 / 15
Source independence7.5 / 15
Intelligence recency6 / 10
Threat acceleration0 / 10
CVSS technical severityExcluded
CVSS
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE
CWE-749
CPE records
2
Deterministic history records
20
Primary technical reference
07

Raw observations

First-party sensor records

First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.