CVE-2007-6306

14

FAUCET Score

CVE-2007-6306 describes multiple cross-site scripting (XSS) vulnerabilities found in the image map feature of JFreeChart 1.0.8. Attackers can inject malicious web script or HTML through various chart attributes like name, tooltip text, href, shape, or coords. This vulnerability carries a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity, requiring no authentication, and primarily impacting integrity (data manipulation). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.0.8CPE matchmatch criteria	cpe:2.3:o:jfree:jfreechart:1.0.8:::::::*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

2.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

2.76%

Probability of exploitation in next 30 days

EPSS Percentile

84.7%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0276 is in the 77th percentile among its peer group of 19,953 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (88)

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: glassfish-javamail-0:1.4.0-0jpp.ep1.8

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-entitymanager-0:3.2.1-1jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hsqldb-1:1.8.0.8-2.patch01.1jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jacorb-0:2.3.0-1jpp.ep1.4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossas-0:4.2.0-3.GA_CP02.ep1.3.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossws-jboss42-0:1.2.1-0jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jgroups-1:2.4.1-1.SP4.0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: hibernate3-0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jacorb-0:2.3.0-1jpp.ep1.5.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jbossas-0:4.2.0-4.GA_CP02.ep1.3.el5.3

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el5.1

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jabberd-0:2.0s10-3.37.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: openmotif21-0:2.1.30-9.RHEL3.8

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: perl-Crypt-CBC-0:2.24-1.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modperl-0:1.29-16.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: mod_perl-0:2.0.2-12.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: rhn-web-0:5.1.1-7

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.1Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: concurrent-0:1.3.4-7jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-javamail-0:1.4.0-0jpp.ep1.8

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jstl-0:1.2.0-0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-entitymanager-0:3.2.1-1jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hsqldb-1:1.8.0.8-2.patch01.1jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jacorb-0:2.3.0-1jpp.ep1.4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossas-0:4.2.0-3.GA_CP02.ep1.3.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-common-0:1.2.1-0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossws-wsconsume-impl-0:2.0.0-0jpp.ep1.3

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossxb-0:1.0.0-2.SP1.0jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jgroups-1:2.4.1-1.SP4.0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: wsdl4j-0:1.6.2-1jpp.ep1.8

Vendor Advisories (1)

redhatCVE-2007-6306Moderate

JFreeChart: XSS vulnerabilities in the image map feature

References

jfreechart.svn.sourceforge.net / viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS

Patch

jfreechart.svn.sourceforge.net / viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java

Exploit

jfreechart.svn.sourceforge.net / viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java

Exploit

osvdb.org / 41843

osvdb.org / 41844

osvdb.org / 41845

rhn.redhat.com / errata/RHSA-2008-0630.html

secunia.com / advisories/27959

Vendor Advisory

secunia.com / advisories/31493

securityreason.com / securityalert/3430

exchange.xforce.ibmcloud.com / vulnerabilities/38922

rapid7.com / advisories/R7-0031.jsp

redhat.com / support/errata/RHSA-2008-0151.html

redhat.com / support/errata/RHSA-2008-0158.html

redhat.com / support/errata/RHSA-2008-0213.html

redhat.com / support/errata/RHSA-2008-0261.html

securityfocus.com / archive/1/484709/100/0/threaded

securityfocus.com / bid/26752