Cyber Resilience

CVE-2016-2510

Beanshell 1.0 … 2.0

Public PoCHigh EPSS
Published
07 April 2016
Modified
06 May 2026
Patch / advisory
View advisory
CVSS Score v3.1 8.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.70 99.3th percentile
Risk Priority 85 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2016-2510 is a high-severity an unspecified weakness vulnerability in Beanshell Beanshell. Its CVSS base score is 8.1 (High).

Operationally, ranked in the top 0.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

CWE(s)
CWE-19

Related Threats

CVEs Like This One

CVE-2019-10149Same product: Canonical Ubuntu Linux
CVE-2023-3777Same product: Canonical Ubuntu Linux
CVE-2025-26466Same product: Canonical Ubuntu Linux
CVE-2022-0543Same product: Canonical Ubuntu Linux
CVE-2025-6966Same product: Canonical Ubuntu Linux
CVE-2018-6789Same product: Canonical Ubuntu Linux
CVE-2018-7584Same product: Canonical Ubuntu Linux
CVE-2023-3389Same product: Canonical Ubuntu Linux
CVE-2023-40283Same product: Canonical Ubuntu Linux
CVE-2020-8794Same product: Canonical Ubuntu Linux

Affected Assets

beanshell
beanshell
1.0, 2.0
debian
debian linux
7.0, 8.0
canonical
ubuntu linux
12.04, 14.04, 15.10

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References