TIBCO

Records236All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical52CVSS 9.0–10.0

CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV

TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 88KEV 2022-12-29 TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records

Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

22 records in Jasperreports Server · all components

TI-2018-03944 CVE-2018-5430 · GHSA-782f-h7v4-m7wc

TIBCO JasperReports Server Information Disclosure Vulnerability

CRITICAL 95KEV

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TI…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.48054 Published 2018-04-17 No fix listed CWE-200

TI-2018-13320 CVE-2018-18809 · GHSA-2qh3-cx4w-cf3x

TIBCO JasperReports Library Directory Traversal Vulnerability

CRITICAL 88KEV

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO J…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.79064 Published 2019-03-07 No fix listed CWE-22

TI-2020-07525 CVE-2020-9409 · GHSA-j2v4-xwh5-47fc

TIBCO JasperReports Server Fails To Enforce Access Restrictions

MEDIUM 48

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03503 Published 2020-05-20 No fix listed CWE-276

TI-2018-13325 CVE-2018-18815 · GHSA-x2m2-4jfp-mm86

TIBCO JasperReports Server User Information Disclosure

MEDIUM 48

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03132 Published 2019-03-07 No fix listed CWE-863

TI-2020-07526 CVE-2020-9410 · GHSA-jcfp-678f-37q2

Cross-site scripting in TIBCO JasperReports Library

MEDIUM 46

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05374 Published 2020-05-20 No fix listed CWE-79

TI-2017-03548 CVE-2017-5533 · GHSA-27wc-fr9j-8x58

TIBCO JasperReports Server credentials disclosure

MEDIUM 46

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and T…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02176 Published 2017-11-15 No fix listed

TI-2022-07020 CVE-2022-22771 · GHSA-g4m4-hxvm-28mq

TIBCO JasperReports Library Directory Traversal Vulnerability

MEDIUM 43

The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02385 Published 2022-03-15 No fix listed CWE-22

TI-2022-19966 CVE-2022-41561 · GHSA-6jvq-qq93-6gh3

TIBCO JasperReports Server RCE Vulnerability

MEDIUM 42

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO Jaspe…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0156 Published 2022-12-15 No fix listed

TI-2022-19968 CVE-2022-41563 · GHSA-2wj3-4hph-hjgw

TIBCO JasperReports Server Stored XSS Vulnerability

MEDIUM 41

The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0093 Published 2022-12-15 No fix listed CWE-79

TI-2018-13319 CVE-2018-18808 · GHSA-85xr-j783-4jm2

TIBCO JasperReports Server Privilege Escalation Via Race Condition

MEDIUM 41

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tena…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01705 Published 2019-03-07 No fix listed CWE-362

TI-2018-03943 CVE-2018-5429 · GHSA-6524-6266-mqf2

TIBCO JasperReports Library Code Sandboxing Problem

MEDIUM 41

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Li…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01525 Published 2018-04-17 No fix listed

TI-2021-14233 CVE-2021-35495 · GHSA-q7gp-x3qj-q4v2

TIBCO JasperReports FTP Password exposed

MEDIUM 40

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition,…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00826 Published 2021-10-12 No fix listed

TI-2017-03543 CVE-2017-5528 · GHSA-899x-3fcr-8p3x

TIBCO JasperReports Server cross-site vulnerabilities

LOW 39

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2017-06-29 Will not fix CWE-352

TI-2022-19967 CVE-2022-41562 · GHSA-x673-9hgv-mcv7

TIBCO JasperReports Server XSS Issue on Roles

LOW 38

The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperRep…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00765 Published 2022-12-15 No fix listed CWE-79

TI-2018-13326 CVE-2018-18816 · GHSA-5j9q-xwf2-gf7h

TIBCO JasperReports Persistent Cross Site Scripting Vulnerability

LOW 37

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TI…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01234 Published 2019-03-07 No fix listed CWE-79

TI-2019-06477 CVE-2019-8986 · GHSA-cppw-793h-whp5

TIBCO JasperReports Server XML Entity Expansion Vulnerability

LOW 36

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01039 Published 2019-03-07 No fix listed

TI-2022-07022 CVE-2022-22773 · GHSA-mf8h-5f5r-mpg8

TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability

LOW 34

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace,…

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00523 Published 2022-05-17 No fix listed CWE-79

TI-2021-14234 CVE-2021-35496 · GHSA-7qj3-x497-55f5

TIBCO JasperReports XML Eternal Entity (XXE) vulnerability

LOW 34

The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBC…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00641 Published 2021-10-12 No fix listed CWE-611

TI-2017-03544 CVE-2017-5529 · GHSA-c4qf-w393-rfcw

TIBCO JasperReports Library Information Disclosure

LOW 32

JasperReports library components contain an information disclosure vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01329 Published 2017-06-29 Will not fix CWE-200

TI-2018-03945 CVE-2018-5431 · GHSA-h4j5-2v82-4354

TIBCO JasperReports Server Cross Site Scripting Vulnerability

LOW 29

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenanc…

CVSS 3.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00591 Published 2018-04-17 No fix listed CWE-79

TI-2021-14232 CVE-2021-35494 · GHSA-95fh-3xq2-rfcx

TIBCO JasperReports unauthorized access to temporary object

LOW 26

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO Jasper…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00502 Published 2021-10-12 No fix listed CWE-362

TI-2017-03547 CVE-2017-5532 · GHSA-cwm8-8754-76qc

TIBCO JasperReports persistent cross site scripting

LOW 26

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperRepo…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00687 Published 2017-11-15 No fix listed CWE-79

Open these records in search →