AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-6059

MEDIUM · CVSS 5 EPSS 1.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-11-20 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It affects Java. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2007-6059
Severity
MEDIUM
CVSS
5
EPSS
1.76%
Java

Original NVD Description

Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products.