VULNERABILITY INTELLIGENCE

CVE-2012-1094

CVSS score7.5 HIGH

EPSS probability1.10%

CISA KEVNot currently listed

Published2020-03-10

Last modified2026-06-16

Description

JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.