Tibco Jasperreports Server vulnerabilities

23 known vulnerabilities affecting tibco/jasperreports_server.

Total CVEs
23
CISA KEV
2
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL3HIGH12MEDIUM8

Vulnerabilities

Page 2 of 2
CVE-2017-5532MEDIUMCVSS 5.4≤ 6.2.3v6.3.0+4 more2017-11-15
CVE-2017-5532 [MEDIUM] CWE-79 CVE-2017-5532: A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO
nvd
CVE-2017-5528HIGHCVSS 8.8≤ 6.1.1v6.2.0+4 more2017-06-29
CVE-2017-5528 [HIGH] CWE-352 CVE-2017-5528: Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, a
nvd
CVE-2017-5529MEDIUMCVSS 6.5≤ 6.1.1v6.2.0+2 more2017-06-29
CVE-2017-5529 [MEDIUM] CWE-200 CVE-2017-5529: JasperReports library components contain an information disclosure vulnerability. This vulnerability JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below),
nvd