Tibco Jasperreports Server vulnerabilities

23 known vulnerabilities affecting tibco/jasperreports_server.

Total CVEs
23
CISA KEV
2
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL3HIGH12MEDIUM8

Vulnerabilities

Page 1 of 2
CVE-2024-3323HIGHCVSS 8.3≥ 8.0, < 8.0.4≥ 8.2, < 8.2.02024-04-17
CVE-2024-3323 [HIGH] CWE-79 CVE-2024-3323: Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8 Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
cvelistv5nvd
CVE-2022-41562HIGHCVSS 8.4≤ 8.0.2≤ 8.1.0+1 more2022-12-13
CVE-2022-41562 [HIGH] CWE-79 CVE-2022-41562: The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and T
nvd
CVE-2022-41561HIGHCVSS 7.2≤ 8.0.2≤ 8.1.0+1 more2022-12-13
CVE-2022-41561 [HIGH] CVE-2022-41561: The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRep The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBC
nvd
CVE-2022-41563MEDIUMCVSS 5.4≤ 8.0.2≤ 8.1.0+1 more2022-12-13
CVE-2022-41563 [MEDIUM] CWE-79 CVE-2022-41563: The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Ser The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure cont
nvd
CVE-2022-22773MEDIUMCVSS 5.4≤ 7.9.2fixed in 8.0.22022-05-17
CVE-2022-22773 [MEDIUM] CWE-79 CVE-2022-22773: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains difficult to exploit Re
nvd
CVE-2022-22771HIGHCVSS 8.8v7.9.0v7.9.12022-03-15
CVE-2022-22771 [HIGH] CWE-22 CVE-2022-22771: The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Libra The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains a directory-traversal vulnerability that may
nvd
CVE-2021-35495HIGHCVSS 8.8≤ 7.2.1≤ 7.8.0+5 more2021-10-12
CVE-2021-35495 [HIGH] CVE-2021-35495: The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO Jasper The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix B
nvd
CVE-2021-35496HIGHCVSS 7.5≤ 7.2.1≤ 7.8.0+5 more2021-10-12
CVE-2021-35496 [HIGH] CWE-611 CVE-2021-35496: The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRepo The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatr
nvd
CVE-2021-35494MEDIUMCVSS 5.3≤ 7.2.1≤ 7.8.0+5 more2021-10-12
CVE-2021-35494 [MEDIUM] CWE-362 CVE-2021-35494: The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM
nvd
CVE-2020-9409CRITICALCVSS 9.8≤ 7.1.12020-05-20
CVE-2020-9409 [CRITICAL] CWE-276 CVE-2020-9409: The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRep The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a JasperReports Server "superuser" for the affected system
nvd
CVE-2020-9410HIGHCVSS 8.8≤ 7.1.1≤ 7.5.0+2 more2020-05-20
CVE-2020-9410 [HIGH] CWE-79 CVE-2020-9410: The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperRep The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an attacker to exploit HTML injection to g
nvd
CVE-2018-18815CRITICALCVSS 9.8≤ 6.4.3≤ 7.1.0+5 more2019-03-07
CVE-2018-18815 [CRITICAL] CWE-863 CVE-2018-18815: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability that theoretically allows unauthenticated users to bypa
nvd
CVE-2018-18808HIGHCVSS 7.5≤ 6.3.4≤ 6.4.3+6 more2019-03-07
CVE-2018-18808 [HIGH] CWE-362 CVE-2018-18808: The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRep The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a race-condition vulnerability that may allow any users with domai
nvd
CVE-2019-8986HIGHCVSS 7.7≤ 6.3.4≤ 6.4.3+4 more2019-03-07
CVE-2019-8986 [HIGH] CVE-2019-8986: The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including
nvd
CVE-2018-18816MEDIUMCVSS 5.4≤ 6.3.4≤ 6.4.3+6 more2019-03-07
CVE-2018-18816 [MEDIUM] CWE-79 CVE-2018-18816: The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Se The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO
nvd
CVE-2018-18809MEDIUMCVSS 6.5KEVPoC≤ 6.4.3v7.1.02019-03-07
CVE-2018-18809 [MEDIUM] CWE-22 CVE-2018-18809: The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO Jasper The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy,
nvd
CVE-2018-5429HIGHCVSS 8.8≤ 6.2.4≤ 6.4.2+5 more2018-04-17
CVE-2018-5429 [HIGH] CVE-2018-5429: A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Serve A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Ten
nvd
CVE-2018-5430HIGHCVSS 8.8KEVPoC≤ 6.2.4≤ 6.4.2+5 more2018-04-17
CVE-2018-5430 [HIGH] CWE-22 CVE-2018-5430: The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the co
nvd
CVE-2018-5431MEDIUMCVSS 5.4≤ 6.2.4≤ 6.4.2+5 more2018-04-17
CVE-2018-5431 [MEDIUM] CWE-79 CVE-2018-5431: The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRepor The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow, in the context of a non-default perm
nvd
CVE-2017-5533CRITICALCVSS 9.8v6.4.02017-11-15
CVE-2017-5533 [CRITICAL] CVE-2017-5533: A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Serve A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the we
nvd
1 / 2Next →