OMENWAVE modelled vulnerability-chaining pathways

CVE-2010-0738

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

5.3
CVSS Medium
73.8%
EPSS p99
YES
In CISA KEV
YES
Ransomware-linked

Data as of 2 Nov 2026 · NVD, CISA KEV, EPSS

Why chaining, at machine speed

Defenders still triage vulnerabilities one CVE at a time, while increasingly automated attackers combine them at machine speed. Omenwave models the plausible pathways by which this CVE could be chained with others — surfacing them for research and awareness, with evidence for each step.

Modelled capability profile
Kill-chain stage
IMPACT
Requires
NONE access, NETWORK vector
Grants
NONE access (terminal impact)
Capabilities
data tampering
Model confidence
high · CVSS 3.1
Top plausible next hops

No plausible forward hops are modelled from this CVE in the current corpus (it may be a terminal impact, or an independent entry point rather than a continuation).

Open in the interactive explorer →
Embed this snapshot

Paste this into a blog post or report — it renders a compact, exploit-free chain snapshot.

Modelled plausible chaining potential derived from public CVE metadata (CVSS, CWE, CPE). Not a confirmed real-world exploit chain and contains no exploitation detail. For research and awareness only.

Methodology · Interactive explorer · JSON: /cve/CVE-2010-0738