CVE-2007-6433

20

FAUCET Score

CVE-2007-6433 describes an EJBQL injection vulnerability in the getRenderedEjbql method of the org.jboss.seam.framework.Query class in JBoss Seam 2.x before version 2.0.0.CR3. This flaw allows remote attackers to execute arbitrary EJBQL commands through the order parameter. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 2.0.0CPE matchmatch criteria	cpe:2.3:a:jboss:seam::cr2::::::*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

3.23%

Probability of exploitation in next 30 days

EPSS Percentile

86.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0323 is in the 77th percentile among its peer group of 51,485 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (53)

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: glassfish-javamail-0:1.4.0-0jpp.ep1.8

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hibernate3-entitymanager-0:3.2.1-1jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: hsqldb-1:1.8.0.8-2.patch01.1jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jacorb-0:2.3.0-1jpp.ep1.4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossas-0:4.2.0-3.GA_CP02.ep1.3.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jbossws-jboss42-0:1.2.1-0jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: jgroups-1:2.4.1-1.SP4.0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 4Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el4

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: hibernate3-0:3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jacorb-0:2.3.0-1jpp.ep1.5.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jbossas-0:4.2.0-4.GA_CP02.ep1.3.el5.3

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el5

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el5.1

redhatpatch availablevia redhat_api

Product: JBEAP 4.2.0 for RHEL 5Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el5.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: concurrent-0:1.3.4-7jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jaf-0:1.1.0-0jpp.ep1.10.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-javamail-0:1.4.0-0jpp.ep1.8

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jsf-0:1.2_04-1.p02.0jpp.ep1.18

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: glassfish-jstl-0:1.2.0-0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-annotations-0:3.2.1-1.patch02.1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hibernate3-entitymanager-0:3.2.1-1jpp.ep1.6.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: hsqldb-1:1.8.0.8-2.patch01.1jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jacorb-0:2.3.0-1jpp.ep1.4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-aop-0:1.5.5-1.CP01.0jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossas-0:4.2.0-3.GA_CP02.ep1.3.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-cache-0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-common-0:1.2.1-0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-remoting-0:2.2.2-3.SP4.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jboss-seam-0:1.2.1-1.ep1.3.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossweb-0:2.0.0-3.CP05.0jpp.ep1.1

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossws-wsconsume-impl-0:2.0.0-0jpp.ep1.3

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jbossxb-0:1.0.0-2.SP1.0jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jcommon-0:1.0.12-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jfreechart-0:1.0.9-1jpp.ep1.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: jgroups-1:2.4.1-1.SP4.0jpp.ep1.2

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: rh-eap-docs-0:4.2.0-3.GA_CP02.ep1.1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Web Application Stack for RHEL 4Fixed in: wsdl4j-0:1.6.2-1jpp.ep1.8

Vendor Advisories (1)

redhatCVE-2007-6433Moderate

EJBQL injection via 'order' parameter

References

jira.jboss.com / jira/browse/JBSEAM-2084

Exploit

osvdb.org / 42631

secunia.com / advisories/28077

Vendor Advisory

sourceforge.net / project/shownotes.php

redhat.com / support/errata/RHSA-2008-0151.html

redhat.com / support/errata/RHSA-2008-0158.html

redhat.com / support/errata/RHSA-2008-0213.html

securityfocus.com / bid/26850

vupen.com / english/advisories/2007/4215