CVE-2024-22949

CVE-2024-22949 concerns JFreeChart v1.5.4, where a NullPointerException is reported in the /chart/annotations/CategoryLineAnnotation component. Multiple sources note that the existence of a vulnerability is disputed and may be based on less robust tooling. Red Hat, OSV, and Ubuntu entries corrobo...

CVE-2023-52070

CVE-2023-52070 concerns JFreeChart v1.5.4 with an alleged ArrayIndexOutOfBounds in setSeriesNeedle(int index, int type). The description on multiple sources notes that the vulnerability’s existence is disputed by third parties, and that the submission may rely on an insufficiently robust identifi...

CVE-2024-23076

CVE-2024-23076 concerns JFreeChart v1.5.4 with a NullPointerException in the label generation path, specifically /labels/BubbleXYItemLabelGenerator.java. Red Hat documents an NPE when the dataset parameter is null in generateLabelString, and multiple sources note that the vulnerability’s existenc...

CVE-2024-23077

JFreeChart v1.5.4 is reported to have an ArrayIndexOutOfBounds issue in /chart/plot/CompassPlot.java. The affected component is the CompassPlot class within JFreeChart, with the vulnerability described as an array index out-of-bounds access. Several connected sources (Red Hat, SUSE, Ubuntu, NVD, ...

CVE-2007-6306

CVE-2007-6306 affects JFreeChart 1.0.8 and in the image map feature allows remote attackers to inject arbitrary web script or HTML via multiple attributes (chart name, chart tool tip text, href, shape, or coords) of a chart area. This is a cross-site scripting (XSS) vulnerability resulting from p...

CVE-2007-6307

CVE-2007-6307 affects wwwstats 3.21, specifically the clickstats.php component. It describes cross-site scripting (XSS) via user-supplied input in the link parameter or the User-Agent header, enabling remote attackers to inject arbitrary script/HTML. The CVSS base score is 4.3 (Medium) with impac...