CVE-2022-41561 — Software INC Tibco Jasperreports Server vulnerability

4 documents4 sources
Severity
7.2HIGHNVD
CNA9.1
EPSS
4.2%
top 11.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Tibco Software INC Tibco Jasperreports ServerTibco Software INC Tibco Jasperreports Server Community EditionTibco Software INC Tibco Jasperreports Server Developer Edition+3 more
Timeline
PublishedDec 13
Latest updateDec 15

Description

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows a privileged/administrative attacker wi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5tibco_software_inc/tibco_jasperreports_serverunspecified — 8.0.2+1

🔴Vulnerability Details

3
CVEList
TIBCO JasperReports Server RCE Vulnerability↗2022-12-15
▶
OSV
CVE-2022-41561: The JNDI Data Sources component of TIBCO Software Inc↗2022-12-13
▶
GHSA
GHSA-6jvq-qq93-6gh3: The JNDI Data Sources component of TIBCO Software Inc↗2022-12-13
▶
CVE-2022-41561 — HIGH severity | cvebase