VULNERABILITY INTELLIGENCE

CVE-2010-3708

CVSS score7.5 HIGH
EPSS probability3.02%
CISA KEVNot currently listed
Published2010-12-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references