CVE-2007-6306
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8...
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
Exploit likelihood
What each source reports
NVD Score used
4.3
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
CVE-2007-6306- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
CVE-2007-6306- Updated
- 2026-11-02
EUVDEUVD-2007-6273 No score
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
EUVD-2007-6273- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2qpv-6w5r-q697 No score
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8...
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
GHSA-2qpv-6w5r-q697- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
CVE-2007-6306- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6306 No score
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
- Record
DEBIAN-CVE-2007-6306- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libjfreechart-javaDebian:12 |
before 1.0.9-1 | 1.0.9-1 |
libjfreechart-javaDebian:13 |
before 1.0.9-1 | 1.0.9-1 |
libjfreechart-javaDebian:14 |
before 1.0.9-1 | 1.0.9-1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.0-0jpp.ep1.8 | 0:1.4.0-0jpp.ep1.8 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
Show 105 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hsqldbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:1.8.0.8-2.patch01.1jpp.ep1.1 | 1:1.8.0.8-2.patch01.1jpp.ep1.1 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-demoRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jacorb-manualRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el4 | 0:1.5.5-1.CP01.0jpp.ep1.1.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1 | 0:2.2.2-3.SP4.0jpp.ep1.1 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.3.el4 | 0:4.2.0-3.GA_CP02.ep1.3.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1 | 0:2.0.0-3.CP05.0jpp.ep1.1 |
jbossws-jboss42Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.2.el4 | 0:1.2.1-0jpp.ep1.2.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el4 | 0:1.0.12-1jpp.ep1.2.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el4 | 0:1.0.9-1jpp.ep1.2.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.1-1.SP4.0jpp.ep1.2 | 1:2.4.1-1.SP4.0jpp.ep1.2 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
concurrentRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.3.4-7jpp.ep1.6.el4 | 0:1.3.4-7jpp.ep1.6.el4 |
glassfish-jafRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.1.0-0jpp.ep1.10.el4 | 0:1.1.0-0jpp.ep1.10.el4 |
glassfish-javamailRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.4.0-0jpp.ep1.8 | 0:1.4.0-0jpp.ep1.8 |
glassfish-jsfRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2_04-1.p02.0jpp.ep1.18 | 0:1.2_04-1.p02.0jpp.ep1.18 |
glassfish-jstlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.0-0jpp.ep1.2 | 0:1.2.0-0jpp.ep1.2 |
hibernate3Red Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-annotations-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el4 | 0:3.2.1-1.patch02.1jpp.ep1.2.el4 |
hibernate3-entitymanagerRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-entitymanager-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:3.2.1-1jpp.ep1.6.el4 | 0:3.2.1-1jpp.ep1.6.el4 |
hibernate3-javadocRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 |
hsqldbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:1.8.0.8-2.patch01.1jpp.ep1.1 | 1:1.8.0.8-2.patch01.1jpp.ep1.1 |
jacorbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.4 | 0:2.3.0-1jpp.ep1.4 |
jboss-aopRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el4 | 0:1.5.5-1.CP01.0jpp.ep1.1.el4 |
jboss-cacheRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 |
jboss-commonRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.2 | 0:1.2.1-0jpp.ep1.2 |
jboss-remotingRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1 | 0:2.2.2-3.SP4.0jpp.ep1.1 |
jboss-seamRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jboss-seam-docsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el4 | 0:1.2.1-1.ep1.3.el4 |
jbossasRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.3.el4 | 0:4.2.0-3.GA_CP02.ep1.3.el4 |
jbosswebRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1 | 0:2.0.0-3.CP05.0jpp.ep1.1 |
jbossws-wsconsume-implRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:2.0.0-0jpp.ep1.3 | 0:2.0.0-0jpp.ep1.3 |
jbossxbRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.0-2.SP1.0jpp.ep1.2.el4 | 0:1.0.0-2.SP1.0jpp.ep1.2.el4 |
jcommonRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el4 | 0:1.0.12-1jpp.ep1.2.el4 |
jfreechartRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el4 | 0:1.0.9-1jpp.ep1.2.el4 |
jgroupsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 1:2.4.1-1.SP4.0jpp.ep1.2 | 1:2.4.1-1.SP4.0jpp.ep1.2 |
rh-eap-docsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el4 | 0:4.2.0-3.GA_CP02.ep1.1.el4 |
wsdl4jRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:1.6.2-1jpp.ep1.8 | 0:1.6.2-1jpp.ep1.8 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 | 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 | 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 | 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 | 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.5.el5 | 0:2.3.0-1jpp.ep1.5.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-1.CP01.0jpp.ep1.1.el5 | 0:1.5.5-1.CP01.0jpp.ep1.1.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5 | 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.2-3.SP4.0jpp.ep1.1.el5 | 0:2.2.2-3.SP4.0jpp.ep1.1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el5 | 0:1.2.1-1.ep1.3.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.3.el5 | 0:1.2.1-1.ep1.3.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-4.GA_CP02.ep1.3.el5.3 | 0:4.2.0-4.GA_CP02.ep1.3.el5.3 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-3.CP05.0jpp.ep1.1.el5 | 0:2.0.0-3.CP05.0jpp.ep1.1.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.12-1jpp.ep1.2.el5 | 0:1.0.12-1jpp.ep1.2.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.9-1jpp.ep1.2.el5.1 | 0:1.0.9-1jpp.ep1.2.el5.1 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el5.1 | 0:4.2.0-3.GA_CP02.ep1.1.el5.1 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-3.GA_CP02.ep1.1.el5.1 | 0:4.2.0-3.GA_CP02.ep1.1.el5.1 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jfreechartRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
mod_perlRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.0.2-12.el4 | 0:2.0.2-12.el4 |
mod_perl-debuginfoRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.0.2-12.el4 | 0:2.0.2-12.el4 |
perl-Crypt-CBCRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-htmlRed Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:5.1.1-7 | 0:5.1.1-7 |
tomcat5Red Hat:network_satellite:5.1::el4 From an advisory covering 11 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6306 is a medium vulnerability (CVSS 4.3) in Jfree Jfreechart, published December 11, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.76%, the 86th percentile. Fixed in libjfreechart-java 1.0.9-1.
References
rhn.redhat.com/errata/RHSA-2008-0630.html
redhat.com/support/errata/RHSA-2008-0213.html
rapid7.com/advisories/R7-0031.jsp
secunia.com/advisories/31493
secunia.com/advisories/27959
redhat.com/support/errata/RHSA-2008-0151.html
Show 194 moreShow less
jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662
securityfocus.com/bid/26752
securityfocus.com/archive/1/484709/100/0/threaded
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662
osvdb.org/41843
osvdb.org/41844
securityreason.com/securityalert/3430
osvdb.org/41845
redhat.com/support/errata/RHSA-2008-0158.html
redhat.com/support/errata/RHSA-2008-0261.html
exchange.xforce.ibmcloud.com/vulnerabilities/38922
nvd.nist.gov/vuln/detail/CVE-2007-6306
github.com/advisories/GHSA-2qpv-6w5r-q697
security-tracker.debian.org/tracker/CVE-2007-6306
access.redhat.com/errata/RHSA-2008:0151
access.redhat.com/security/updates/classification
redhat.com/docs/manuals/jboss/jboss-eap-4.2.0.cp02/readme.html
bugzilla.redhat.com/show_bug.cgi?id=299801
bugzilla.redhat.com/show_bug.cgi?id=421081
bugzilla.redhat.com/show_bug.cgi?id=426206
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0151.json
access.redhat.com/security/cve/CVE-2007-4575
cve.org/CVERecord?id=CVE-2007-4575
nvd.nist.gov/vuln/detail/CVE-2007-4575
access.redhat.com/security/cve/CVE-2007-5461
bugzilla.redhat.com/show_bug.cgi?id=333791
cve.org/CVERecord?id=CVE-2007-5461
nvd.nist.gov/vuln/detail/CVE-2007-5461
access.redhat.com/security/cve/CVE-2007-6306
cve.org/CVERecord?id=CVE-2007-6306
access.redhat.com/security/cve/CVE-2007-6433
cve.org/CVERecord?id=CVE-2007-6433
nvd.nist.gov/vuln/detail/CVE-2007-6433
access.redhat.com/security/cve/CVE-2008-0002
bugzilla.redhat.com/show_bug.cgi?id=432327
cve.org/CVERecord?id=CVE-2008-0002
nvd.nist.gov/vuln/detail/CVE-2008-0002
access.redhat.com/errata/RHSA-2008:0158
rhstack.108.redhat.com/docs/Red_Hat_Application_Stack_V.1.2_Release_Notes.html
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0158.json
access.redhat.com/errata/RHSA-2008:0213
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0213.json
access.redhat.com/errata/RHSA-2008:0261
bugzilla.redhat.com/show_bug.cgi?id=396641
bugzilla.redhat.com/show_bug.cgi?id=444136
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0261.json
access.redhat.com/security/cve/CVE-2004-0885
bugzilla.redhat.com/show_bug.cgi?id=430637
cve.org/CVERecord?id=CVE-2004-0885
nvd.nist.gov/vuln/detail/CVE-2004-0885
access.redhat.com/security/cve/CVE-2005-0605
bugzilla.redhat.com/show_bug.cgi?id=430520
cve.org/CVERecord?id=CVE-2005-0605
nvd.nist.gov/vuln/detail/CVE-2005-0605
access.redhat.com/security/cve/CVE-2005-2090
bugzilla.redhat.com/show_bug.cgi?id=237079
cve.org/CVERecord?id=CVE-2005-2090
nvd.nist.gov/vuln/detail/CVE-2005-2090
access.redhat.com/security/cve/CVE-2005-3510
bugzilla.redhat.com/show_bug.cgi?id=237085
cve.org/CVERecord?id=CVE-2005-3510
nvd.nist.gov/vuln/detail/CVE-2005-3510
access.redhat.com/security/cve/CVE-2005-3964
bugzilla.redhat.com/show_bug.cgi?id=430519
cve.org/CVERecord?id=CVE-2005-3964
nvd.nist.gov/vuln/detail/CVE-2005-3964
access.redhat.com/security/cve/CVE-2005-4838
bugzilla.redhat.com/show_bug.cgi?id=238401
cve.org/CVERecord?id=CVE-2005-4838
nvd.nist.gov/vuln/detail/CVE-2005-4838
access.redhat.com/security/cve/CVE-2006-0254
bugzilla.redhat.com/show_bug.cgi?id=430646
cve.org/CVERecord?id=CVE-2006-0254
nvd.nist.gov/vuln/detail/CVE-2006-0254
access.redhat.com/security/cve/CVE-2006-0898
bugzilla.redhat.com/show_bug.cgi?id=430522
cve.org/CVERecord?id=CVE-2006-0898
nvd.nist.gov/vuln/detail/CVE-2006-0898
access.redhat.com/security/cve/CVE-2006-1329
bugzilla.redhat.com/show_bug.cgi?id=429254
cve.org/CVERecord?id=CVE-2006-1329
nvd.nist.gov/vuln/detail/CVE-2006-1329
access.redhat.com/security/cve/CVE-2006-3835
bugzilla.redhat.com/show_bug.cgi?id=237084
cve.org/CVERecord?id=CVE-2006-3835
nvd.nist.gov/vuln/detail/CVE-2006-3835
access.redhat.com/security/cve/CVE-2006-5752
bugzilla.redhat.com/show_bug.cgi?id=245112
cve.org/CVERecord?id=CVE-2006-5752
nvd.nist.gov/vuln/detail/CVE-2006-5752
access.redhat.com/security/cve/CVE-2006-7195
bugzilla.redhat.com/show_bug.cgi?id=237081
cve.org/CVERecord?id=CVE-2006-7195
nvd.nist.gov/vuln/detail/CVE-2006-7195
access.redhat.com/security/cve/CVE-2006-7196
bugzilla.redhat.com/show_bug.cgi?id=238131
cve.org/CVERecord?id=CVE-2006-7196
nvd.nist.gov/vuln/detail/CVE-2006-7196
access.redhat.com/security/cve/CVE-2006-7197
bugzilla.redhat.com/show_bug.cgi?id=430642
cve.org/CVERecord?id=CVE-2006-7197
nvd.nist.gov/vuln/detail/CVE-2006-7197
access.redhat.com/security/cve/CVE-2007-0243
bugzilla.redhat.com/show_bug.cgi?id=325941
cve.org/CVERecord?id=CVE-2007-0243
nvd.nist.gov/vuln/detail/CVE-2007-0243
access.redhat.com/security/cve/CVE-2007-0450
bugzilla.redhat.com/show_bug.cgi?id=237080
cve.org/CVERecord?id=CVE-2007-0450
nvd.nist.gov/vuln/detail/CVE-2007-0450
access.redhat.com/security/cve/CVE-2007-1349
bugzilla.redhat.com/show_bug.cgi?id=240423
cve.org/CVERecord?id=CVE-2007-1349
nvd.nist.gov/vuln/detail/CVE-2007-1349
access.redhat.com/security/cve/CVE-2007-1355
bugzilla.redhat.com/show_bug.cgi?id=253166
cve.org/CVERecord?id=CVE-2007-1355
nvd.nist.gov/vuln/detail/CVE-2007-1355
access.redhat.com/security/cve/CVE-2007-1358
bugzilla.redhat.com/show_bug.cgi?id=244803
cve.org/CVERecord?id=CVE-2007-1358
nvd.nist.gov/vuln/detail/CVE-2007-1358
access.redhat.com/security/cve/CVE-2007-1860
bugzilla.redhat.com/show_bug.cgi?id=237656
cve.org/CVERecord?id=CVE-2007-1860
nvd.nist.gov/vuln/detail/CVE-2007-1860
access.redhat.com/security/cve/CVE-2007-2435
bugzilla.redhat.com/show_bug.cgi?id=239660
cve.org/CVERecord?id=CVE-2007-2435
nvd.nist.gov/vuln/detail/CVE-2007-2435
access.redhat.com/security/cve/CVE-2007-2449
bugzilla.redhat.com/show_bug.cgi?id=244804
cve.org/CVERecord?id=CVE-2007-2449
nvd.nist.gov/vuln/detail/CVE-2007-2449
access.redhat.com/security/cve/CVE-2007-2450
bugzilla.redhat.com/show_bug.cgi?id=244808
cve.org/CVERecord?id=CVE-2007-2450
nvd.nist.gov/vuln/detail/CVE-2007-2450
access.redhat.com/security/cve/CVE-2007-2788
bugzilla.redhat.com/show_bug.cgi?id=250725
cve.org/CVERecord?id=CVE-2007-2788
nvd.nist.gov/vuln/detail/CVE-2007-2788
access.redhat.com/security/cve/CVE-2007-2789
bugzilla.redhat.com/show_bug.cgi?id=250729
cve.org/CVERecord?id=CVE-2007-2789
nvd.nist.gov/vuln/detail/CVE-2007-2789
access.redhat.com/security/cve/CVE-2007-3304
bugzilla.redhat.com/show_bug.cgi?id=245111
cve.org/CVERecord?id=CVE-2007-3304
nvd.nist.gov/vuln/detail/CVE-2007-3304
access.redhat.com/security/cve/CVE-2007-3382
bugzilla.redhat.com/show_bug.cgi?id=247972
cve.org/CVERecord?id=CVE-2007-3382
nvd.nist.gov/vuln/detail/CVE-2007-3382
access.redhat.com/security/cve/CVE-2007-3385
bugzilla.redhat.com/show_bug.cgi?id=247976
cve.org/CVERecord?id=CVE-2007-3385
nvd.nist.gov/vuln/detail/CVE-2007-3385
access.redhat.com/security/cve/CVE-2007-4465
bugzilla.redhat.com/show_bug.cgi?id=289511
cve.org/CVERecord?id=CVE-2007-4465
nvd.nist.gov/vuln/detail/CVE-2007-4465
access.redhat.com/security/cve/CVE-2007-5000
bugzilla.redhat.com/show_bug.cgi?id=419931
cve.org/CVERecord?id=CVE-2007-5000
nvd.nist.gov/vuln/detail/CVE-2007-5000
access.redhat.com/security/cve/CVE-2007-5961
cve.org/CVERecord?id=CVE-2007-5961
nvd.nist.gov/vuln/detail/CVE-2007-5961
access.redhat.com/security/cve/CVE-2007-6388
bugzilla.redhat.com/show_bug.cgi?id=427228
cve.org/CVERecord?id=CVE-2007-6388
nvd.nist.gov/vuln/detail/CVE-2007-6388
access.redhat.com/security/cve/CVE-2008-0128
bugzilla.redhat.com/show_bug.cgi?id=429821
cve.org/CVERecord?id=CVE-2008-0128
nvd.nist.gov/vuln/detail/CVE-2008-0128
access.redhat.com/errata/RHSA-2008:0524
bugzilla.redhat.com/show_bug.cgi?id=449337
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0524.json
bugzilla.redhat.com/show_bug.cgi?id=430513
cve.org/CVERecord?id=CVE-2004-0687
nvd.nist.gov/vuln/detail/CVE-2004-0687
bugzilla.redhat.com/show_bug.cgi?id=430515
cve.org/CVERecord?id=CVE-2004-0688
nvd.nist.gov/vuln/detail/CVE-2004-0688
bugzilla.redhat.com/show_bug.cgi?id=430516
cve.org/CVERecord?id=CVE-2004-0914
nvd.nist.gov/vuln/detail/CVE-2004-0914
bugzilla.redhat.com/show_bug.cgi?id=452461
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0630.json
cve.org/CVERecord?id=CVE-2008-2369
nvd.nist.gov/vuln/detail/CVE-2008-2369
Left out here: 5 references. The JSON record has them.