Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-mpr2-q1gb-p7ce
Vulnerability ID VCID-mpr2-q1gb-p7ce
Aliases CVE-2008-3273
Summary JBossEAP status servlet info leak
Status Published
Exploitability 2.0
Weighted Severity 4.5
Risk 9.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-264 Permissions, Privileges, and Access Controls
System Score Found at
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
epss 0.414 https://api.first.org/data/v1/epss?cve=CVE-2008-3273
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2008-3273
Reference id Reference type URL
http://marc.info/?l=bugtraq&m=132698550418872&w=2
http://rhn.redhat.com/errata/RHSA-2008-0825.html
http://rhn.redhat.com/errata/RHSA-2008-0826.html
http://rhn.redhat.com/errata/RHSA-2008-0827.html
http://rhn.redhat.com/errata/RHSA-2008-0828.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3273.json
https://api.first.org/data/v1/epss?cve=CVE-2008-3273
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=457757
https://exchange.xforce.ibmcloud.com/vulnerabilities/44235
https://jira.jboss.org/jira/browse/JBPAPP-544
http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp03/html-single/readme/index.html
http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp01/html-single/readme/
http://www.securityfocus.com/bid/30540
http://www.securitytracker.com/id?1020628
457757 https://bugzilla.redhat.com/show_bug.cgi?id=457757
cpe:2.3:a:jboss:enterprise_application_platform:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jboss:enterprise_application_platform:*:*:*:*:*:*:*:*
cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp01:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp01:*:*:*:*:*:*:*
cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp02:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp02:*:*:*:*:*:*:*
CVE-2008-3273 https://nvd.nist.gov/vuln/detail/CVE-2008-3273
RHSA-2008:0825 https://access.redhat.com/errata/RHSA-2008:0825
RHSA-2008:0826 https://access.redhat.com/errata/RHSA-2008:0826
RHSA-2008:0827 https://access.redhat.com/errata/RHSA-2008:0827
RHSA-2008:0828 https://access.redhat.com/errata/RHSA-2008:0828
Data source Metasploit
Description This module scans a JBoss instance for a few vulnerabilities.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2008-3273
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.97376
EPSS Score 0.414
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:58:53.006664+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3273.json 38.0.0