Jfree

6 CVEs in 1 Jfree product, including Jfreechart. Newest: CVE-2024-23077 (2024-04-10). Severity, EPSS and public exploits for each.

Jfree products with known CVEs

ProductCVEs
Jfreechart6
Jfree CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-23077High7.52024-04-10JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component /chart/plot/CompassPlot.java. NOTE: this is disputed by multiple t…
CVE-2023-52070High8.42024-04-10JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by mul…
CVE-2024-23076High7.52024-04-10JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multipl…
CVE-2024-22949Critical9.12024-04-08JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multi…
CVE-2007-63072007-12-11Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) th…
CVE-2007-63062007-12-11Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML…