Approved changes feed: RSS · Atom

cpe:2.3:a:jboss:seam:*:cr2:*:*:*:*:*:*

part: a version: * update: cr2

VendorJboss (d5af4e88-7b39-590c-acfe-40fb2caf622f)
ProductSeam (9e8caa15-5fa1-57c2-932a-9d05f1d5f350)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/seam2/jboss-seam purl2cpe 2026-06-01 10:10:59.786362
pkg:java2s/jboss-seam purl2cpe 2026-06-01 10:10:59.786365
pkg:maven/jboss/jboss-seam purl2cpe 2026-06-01 10:10:59.786368

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6433 vulnerable 2026-06-08 04:50:08.841447 Details available
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.
Published: 2007-12-18T20:00:00.000Z
Updated: 2024-08-07T16:02:36.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.