Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Jfree

First CVE: Dec 11, 2007Active for: 19 yearsTotal CVEs: 6

JFree maintains a narrowly scoped but strategically placed charting library, JFreeChart, that is embedded across Java applications and business intelligence platforms where its rendering and data-processing logic sits on a high-trust boundary. Vulnerabilities affecting the vendor skew toward serious outcomes and frequently acquire public exploit tooling; the recurring weakness classes—including cross-site scripting in chart rendering, out-of-bounds reads, buffer overflows, and null-pointer dereferences—reflect the memory-handling and untrusted-data parsing demands of a graphics library positioned to process external datasets. Live severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
3.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 91% of tracked vendors
6.8
Avg CVSS Score
Higher Avg CVSS Score than 48% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Jfree over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 11, 2007
18 years ago
Most Recent CVE
Apr 10, 2024
835 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-52070HIGH
JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by multiple third parties w
Apr 10, 20248.425NONO
CVE-2024-22949CRITICAL
JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who
Apr 8, 20249.124NONO
CVE-2024-23077HIGH
JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component /chart/plot/CompassPlot.java. NOTE: this is disputed by multiple third parties who beli
Apr 10, 20247.523NONO
CVE-2007-6307MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (
Dec 11, 20074.322NOYES
CVE-2024-23076HIGH
JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multiple third parties who b
Apr 10, 20247.521NONO
CVE-2007-6306MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart nam
Dec 11, 20074.314NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
33%
50%
17%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (16.7%)
Network3 (50.0%)
Unknown2 (33.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (66.7%)
High0 (0.0%)
Unknown2 (33.3%)
User Interaction
None4 (66.7%)
Unknown2 (33.3%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (66.7%)
Unknown2 (33.3%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
16.7% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Jfree.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Jfree — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Jfree's Products

View all 1 CNAs →

Top CWEs