Every CVE Search/ Get API key

CVE-2007-6433

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before...

7.5 High

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.

Exploit likelihood

3.23%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.

Record
CVE-2007-6433
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.

Record
CVE-2007-6433
Updated
2026-11-02
EUVDEUVD-2007-6399 No score

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.

Record
EUVD-2007-6399
Updated
2026-11-03
GitHub AdvisoriesGHSA-9vxv-w3hg-m494 No score

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before...

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.

Record
GHSA-9vxv-w3hg-m494
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.0-0jpp.ep1.8
0:1.4.0-0jpp.ep1.8
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hsqldb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:1.8.0.8-2.patch01.1jpp.ep1.1
1:1.8.0.8-2.patch01.1jpp.ep1.1
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jacorb-demo
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
Show 60 moreShow less
Affected packages
PackageAffectedFixed
jacorb-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jacorb-manual
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el4
0:1.5.5-1.CP01.0jpp.ep1.1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1
0:2.2.2-3.SP4.0jpp.ep1.1
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.3.el4
0:4.2.0-3.GA_CP02.ep1.3.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1
0:2.0.0-3.CP05.0jpp.ep1.1
jbossws-jboss42
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.2.el4
0:1.2.1-0jpp.ep1.2.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el4
0:1.0.12-1jpp.ep1.2.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el4
0:1.0.9-1jpp.ep1.2.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.1-1.SP4.0jpp.ep1.2
1:2.4.1-1.SP4.0jpp.ep1.2
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
concurrent
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.3.4-7jpp.ep1.6.el4
0:1.3.4-7jpp.ep1.6.el4
glassfish-jaf
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.1.0-0jpp.ep1.10.el4
0:1.1.0-0jpp.ep1.10.el4
glassfish-javamail
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.4.0-0jpp.ep1.8
0:1.4.0-0jpp.ep1.8
glassfish-jsf
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2_04-1.p02.0jpp.ep1.18
0:1.2_04-1.p02.0jpp.ep1.18
glassfish-jstl
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.0-0jpp.ep1.2
0:1.2.0-0jpp.ep1.2
hibernate3
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-annotations-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el4
0:3.2.1-1.patch02.1jpp.ep1.2.el4
hibernate3-entitymanager
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-entitymanager-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:3.2.1-1jpp.ep1.6.el4
0:3.2.1-1jpp.ep1.6.el4
hibernate3-javadoc
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
hsqldb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:1.8.0.8-2.patch01.1jpp.ep1.1
1:1.8.0.8-2.patch01.1jpp.ep1.1
jacorb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.4
0:2.3.0-1jpp.ep1.4
jboss-aop
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el4
0:1.5.5-1.CP01.0jpp.ep1.1.el4
jboss-cache
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
jboss-common
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.2
0:1.2.1-0jpp.ep1.2
jboss-remoting
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1
0:2.2.2-3.SP4.0jpp.ep1.1
jboss-seam
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jboss-seam-docs
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el4
0:1.2.1-1.ep1.3.el4
jbossas
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.3.el4
0:4.2.0-3.GA_CP02.ep1.3.el4
jbossweb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1
0:2.0.0-3.CP05.0jpp.ep1.1
jbossws-wsconsume-impl
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:2.0.0-0jpp.ep1.3
0:2.0.0-0jpp.ep1.3
jbossxb
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.0-2.SP1.0jpp.ep1.2.el4
0:1.0.0-2.SP1.0jpp.ep1.2.el4
jcommon
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el4
0:1.0.12-1jpp.ep1.2.el4
jfreechart
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el4
0:1.0.9-1jpp.ep1.2.el4
jgroups
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 1:2.4.1-1.SP4.0jpp.ep1.2
1:2.4.1-1.SP4.0jpp.ep1.2
rh-eap-docs
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
rh-eap-docs-examples
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el4
0:4.2.0-3.GA_CP02.ep1.1.el4
wsdl4j
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
 before 0:1.6.2-1jpp.ep1.8
0:1.6.2-1jpp.ep1.8
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
0:3.2.1-1.patch02.1jpp.ep1.2.el5.1
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.5.el5
0:2.3.0-1jpp.ep1.5.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-1.CP01.0jpp.ep1.1.el5
0:1.5.5-1.CP01.0jpp.ep1.1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5
0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.2-3.SP4.0jpp.ep1.1.el5
0:2.2.2-3.SP4.0jpp.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el5
0:1.2.1-1.ep1.3.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.3.el5
0:1.2.1-1.ep1.3.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-4.GA_CP02.ep1.3.el5.3
0:4.2.0-4.GA_CP02.ep1.3.el5.3
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-3.CP05.0jpp.ep1.1.el5
0:2.0.0-3.CP05.0jpp.ep1.1.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.12-1jpp.ep1.2.el5
0:1.0.12-1jpp.ep1.2.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.9-1jpp.ep1.2.el5.1
0:1.0.9-1jpp.ep1.2.el5.1
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el5.1
0:4.2.0-3.GA_CP02.ep1.1.el5.1
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-3.GA_CP02.ep1.1.el5.1
0:4.2.0-3.GA_CP02.ep1.1.el5.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6433 is a high vulnerability (CVSS 7.5) in Jboss Seam, published December 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. No source names a fixed version.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open