CVE-2011-2196

CVE-2011-2196 is a critical vulnerability affecting jboss-seam.jar in JBoss Seam 2 framework versions 2.2.x and earlier, as well as several JBoss Enterprise platforms. It allows remote attackers to execute arbitrary Java code by crafting a malicious URL that exploits improper restrictions on Expression Language (EL) statements within FacesMessages during page exception handling. This vulnerability has a CVSS score of 6.8, indicating a medium severity with network-based attacks, medium complexity, and potential for partial confidentiality, integrity, and availability impacts. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, organizations using affected JBoss products should prioritize patching to mitigate this risk.