Read the docs

TIBCO

Records236All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical52CVSS 9.0–10.0
CVSS high109CVSS 7.0–8.9

Exploited now

TIBCO records in CISA KEV
TI-2018-13320 TIBCO JasperReports Library Directory Traversal Vulnerability Priority CRITICAL 88KEV 2022-12-29TI-2018-03944 TIBCO JasperReports Server Information Disclosure Vulnerability Priority CRITICAL 95KEV 2022-12-29

Components

Products in the NVD configurations · select one to filter the records
Spotfire Server 28 records MEDIUM Jasperreports Server 22 records CRITICAL Spotfire Analytics Platform For Aws 20 records MEDIUM Rendezvous 16 records MEDIUM Spotfire Analyst 12 records MEDIUM Enterprise Message Service 11 records MEDIUM Jaspersoft 10 records CRITICAL Jaspersoft Reporting And Analytics 10 records CRITICAL

Records

10 records in Jaspersoft · all components

TI-2018-03944 CVE-2018-5430 · GHSA-782f-h7v4-m7wc

TIBCO JasperReports Server Information Disclosure Vulnerability

Priority CRITICAL 95KEV

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TI…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.48054 Published 2018-04-17 No fix listed CWE-200
TI-2018-13320 CVE-2018-18809 · GHSA-2qh3-cx4w-cf3x

TIBCO JasperReports Library Directory Traversal Vulnerability

Priority CRITICAL 88KEV

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO J…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.79064 Published 2019-03-07 No fix listed CWE-22
TI-2018-13325 CVE-2018-18815 · GHSA-x2m2-4jfp-mm86

TIBCO JasperReports Server User Information Disclosure

Priority MEDIUM 48

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03132 Published 2019-03-07 No fix listed CWE-863
TI-2017-03548 CVE-2017-5533 · GHSA-27wc-fr9j-8x58

TIBCO JasperReports Server credentials disclosure

Priority MEDIUM 46

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and T…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02176 Published 2017-11-15 No fix listed
TI-2018-13319 CVE-2018-18808 · GHSA-85xr-j783-4jm2

TIBCO JasperReports Server Privilege Escalation Via Race Condition

Priority MEDIUM 41

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tena…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01705 Published 2019-03-07 No fix listed CWE-362
TI-2018-03943 CVE-2018-5429 · GHSA-6524-6266-mqf2

TIBCO JasperReports Library Code Sandboxing Problem

Priority MEDIUM 41

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Li…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01525 Published 2018-04-17 No fix listed
TI-2017-03543 CVE-2017-5528 · GHSA-899x-3fcr-8p3x

TIBCO JasperReports Server cross-site vulnerabilities

Priority LOW 39

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2017-06-29 Will not fix CWE-352
TI-2018-13326 CVE-2018-18816 · GHSA-5j9q-xwf2-gf7h

TIBCO JasperReports Persistent Cross Site Scripting Vulnerability

Priority LOW 37

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TI…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01234 Published 2019-03-07 No fix listed CWE-79
TI-2018-03945 CVE-2018-5431 · GHSA-h4j5-2v82-4354

TIBCO JasperReports Server Cross Site Scripting Vulnerability

Priority LOW 29

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenanc…

CVSS 3.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00591 Published 2018-04-17 No fix listed CWE-79
TI-2017-03547 CVE-2017-5532 · GHSA-cwm8-8754-76qc

TIBCO JasperReports persistent cross site scripting

Priority LOW 26

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperRepo…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00687 Published 2017-11-15 No fix listed CWE-79
Open these records in search →