[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFmAvqqZReq2gZNEPe0efYIJbRrJMU453m6TUoRh3Ecw":3,"g5a-risk:CVE-2010-1428":189},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":26,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":62,"references":63,"referencesCount":137,"weaknesses":138,"weaknessesCount":147,"isActivelyExploited":4,"cisaInfo":148,"otxData":26,"relatedBlogPosts":149,"seoMetadata":150,"configurations":175,"relatedVendorCves":185,"notableEvents":186},"CVE-2010-1428","What is CVE-2010-1428?","The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.","The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4...","2010-04-28T22:30:00.793","2026-10-02T14:55:25.677",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":49},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",5.9,"MEDIUM",2.2,[],[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":35,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":48,"ObtainAllPrivilege":48,"ObtainUserPrivilege":48,"ObtainOtherPrivilege":48,"UserInteractionRequired":48},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":45,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,[],0.62308,[50,50,50,50,50,50,50],"High",[54,59],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"redhat","jboss_enterprise_application_platform","4.2.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0:-:*:*:*:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"4.3.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:-:*:*:*:*:*:*",2,[64,70,76,82,86,90,95,99,102,105,108,111,113,115,117,119,121,123,125,127,129,131,133],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=132698550418872&w=2","Marc",[68,69],"Exploit","Mailing List",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F39563","Secunia",[74,75],"Broken Link","Vendor Advisory",{"url":77,"source":78,"tags":79},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1023917","Securitytracker",[74,80,81],"Third Party Advisory","VDB Entry",{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F39710","Securityfocus",[74,80,81],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2010\u002F0992","Vupen",[74,75],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=585899","Red Hat",[94],"Issue Tracking",{"url":96,"source":97,"tags":98},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F58148","Ibmcloud",[80,81],{"url":100,"source":92,"tags":101},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2010-0376.html",[74,75],{"url":103,"source":92,"tags":104},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2010-0377.html",[74],{"url":106,"source":92,"tags":107},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2010-0378.html",[74],{"url":109,"source":92,"tags":110},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2010-0379.html",[75],{"url":65,"source":66,"tags":112},[68,69],{"url":71,"source":72,"tags":114},[74,75],{"url":77,"source":78,"tags":116},[74,80,81],{"url":83,"source":84,"tags":118},[74,80,81],{"url":87,"source":88,"tags":120},[74,75],{"url":91,"source":92,"tags":122},[94],{"url":96,"source":97,"tags":124},[80,81],{"url":100,"source":92,"tags":126},[74,75],{"url":103,"source":92,"tags":128},[74],{"url":106,"source":92,"tags":130},[74],{"url":109,"source":92,"tags":132},[75],{"url":134,"source":135,"tags":136},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1428","CISA",[74],23,[139],{"id":140,"name":141,"description":142,"extendedDescription":143,"status":144,"abstraction":145,"structure":146},"CWE-749","Exposed Dangerous Method or Function","The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.","This weakness can lead to a wide variety of resultant weaknesses, depending on the behavior of the exposed method. It can apply to any number of technologies and approaches, such as ActiveX controls, Java functions, IOCTLs, and so on.\nThe exposure can occur in a few different ways:","Incomplete","Base","Simple",1,{"shortDescription":45,"requiredAction":45,"vulnerabilityName":45,"dateAdded":26},[],{"title":151,"metaDescription":152,"keywords":153,"canonicalUrl":154,"structuredData":155},"What is CVE-2010-1428? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2010-1428, a high severity cyber security vulnerability from 2010. High exploit probability (62.3%). The Web Console (aka web-c...","CVE-2010-1428, CVE-2010-1428 vulnerability, CVE-2010-1428 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2010, CVSS score, exploit, patch, remediation, redhat security, jboss_enterprise_application_platform vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2010-1428",{"@context":156,"@type":157,"headline":151,"description":152,"datePublished":10,"dateModified":11,"author":158,"publisher":162,"about":166,"mainEntityOfPage":170,"articleSection":173,"keywords":174},"https:\u002F\u002Fschema.org","TechArticle",{"@type":159,"name":160,"url":161},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":159,"name":160,"url":161,"logo":163},{"@type":164,"url":165},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":167,"name":6,"description":168,"additionalType":169},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":171,"@id":172},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2010-1428","Cybersecurity","CVE-2010-1428, CVE-2010-1428 vulnerability, CVE-2010-1428 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[176],{"Operator":26,"Negate":26,"Nodes":177},[178],{"Operator":179,"Negate":48,"CPEMatch":180},"OR",[181,183],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":182,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0D3EADF4-5496-4F5F-B0A6-DBF959C4D7B9",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":184,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FE2A6BEF-2917-437C-A1D5-EE1601FC0A5F",[],[],{"lastModified":11,"cacheTime":188,"version":41},1793199970519,{"score":190,"band":52,"action":191,"scoredAt":192},71,"Emergency patch","2026-07-01T10:17:36.878294+00:00"]