Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: TIBCO Component: Jaspersoft Reporting And Analytics Clear all filters
TI-2018-13326 CVE-2018-18816 · GHSA-5j9q-xwf2-gf7h

TIBCO JasperReports Persistent Cross Site Scripting Vulnerability

Priority LOW 37

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TI…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01234 Published 2019-03-07 No fix listed CWE-79
TI-2018-13325 CVE-2018-18815 · GHSA-x2m2-4jfp-mm86

TIBCO JasperReports Server User Information Disclosure

Priority MEDIUM 48

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03132 Published 2019-03-07 No fix listed CWE-863
TI-2018-13320 CVE-2018-18809 · GHSA-2qh3-cx4w-cf3x

TIBCO JasperReports Library Directory Traversal Vulnerability

Priority CRITICAL 88KEV

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO J…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.79064 Published 2019-03-07 No fix listed CWE-22
TI-2018-13319 CVE-2018-18808 · GHSA-85xr-j783-4jm2

TIBCO JasperReports Server Privilege Escalation Via Race Condition

Priority MEDIUM 41

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tena…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01705 Published 2019-03-07 No fix listed CWE-362
TI-2018-03945 CVE-2018-5431 · GHSA-h4j5-2v82-4354

TIBCO JasperReports Server Cross Site Scripting Vulnerability

Priority LOW 29

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenanc…

CVSS 3.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00591 Published 2018-04-17 No fix listed CWE-79
TI-2018-03944 CVE-2018-5430 · GHSA-782f-h7v4-m7wc

TIBCO JasperReports Server Information Disclosure Vulnerability

Priority CRITICAL 95KEV

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TI…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.48054 Published 2018-04-17 No fix listed CWE-200
TI-2018-03943 CVE-2018-5429 · GHSA-6524-6266-mqf2

TIBCO JasperReports Library Code Sandboxing Problem

Priority MEDIUM 41

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Li…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01525 Published 2018-04-17 No fix listed
TI-2017-03548 CVE-2017-5533 · GHSA-27wc-fr9j-8x58

TIBCO JasperReports Server credentials disclosure

Priority MEDIUM 46

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and T…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02176 Published 2017-11-15 No fix listed
TI-2017-03547 CVE-2017-5532 · GHSA-cwm8-8754-76qc

TIBCO JasperReports persistent cross site scripting

Priority LOW 26

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperRepo…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00687 Published 2017-11-15 No fix listed CWE-79
TI-2017-03543 CVE-2017-5528 · GHSA-899x-3fcr-8p3x

TIBCO JasperReports Server cross-site vulnerabilities

Priority LOW 39

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2017-06-29 Will not fix CWE-352