Tibco Software Inc Tibco Jasperreports Server Community Edition vulnerabilities
17 known vulnerabilities affecting tibco_software_inc/tibco_jasperreports_server_community_edition.
Total CVEs
17
CISA KEV
2
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH8MEDIUM7
Vulnerabilities
Page 1 of 1
CVE-2022-41562HIGHCVSS 8.4≥ unspecified, ≤ 8.1.02022-12-13
CVE-2022-41562 [HIGH] CWE-79 CVE-2022-41562: The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports
The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and T
cvelistv5nvd
CVE-2022-41561HIGHCVSS 7.2≥ unspecified, ≤ 8.1.02022-12-13
CVE-2022-41561 [HIGH] CVE-2022-41561: The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRep
The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBC
cvelistv5nvd
CVE-2022-22773MEDIUMCVSS 5.4≥ unspecified, ≤ 8.0.12022-05-17
CVE-2022-22773 [MEDIUM] CWE-79 CVE-2022-22773: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv
The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains difficult to exploit Re
cvelistv5nvd
CVE-2021-35495HIGHCVSS 8.8≥ unspecified, ≤ 7.8.02021-10-12
CVE-2021-35495 [HIGH] CVE-2021-35495: The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO Jasper
The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix B
cvelistv5nvd
CVE-2021-35496HIGHCVSS 7.5≥ unspecified, ≤ 7.8.02021-10-12
CVE-2021-35496 [HIGH] CWE-611 CVE-2021-35496: The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRepo
The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatr
cvelistv5nvd
CVE-2021-35494MEDIUMCVSS 5.3≥ unspecified, ≤ 7.8.02021-10-12
CVE-2021-35494 [MEDIUM] CWE-362 CVE-2021-35494: The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv
The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM
cvelistv5nvd
CVE-2018-18815CRITICALCVSS 9.8≥ unspecified, ≤ 7.1.02019-03-07
CVE-2018-18815 [CRITICAL] CWE-863 CVE-2018-18815: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serv
The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability that theoretically allows unauthenticated users to bypa
cvelistv5nvd
CVE-2018-18808HIGHCVSS 7.5≥ unspecified, ≤ 7.1.02019-03-07
CVE-2018-18808 [HIGH] CWE-362 CVE-2018-18808: The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRep
The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a race-condition vulnerability that may allow any users with domai
cvelistv5nvd
CVE-2018-18816MEDIUMCVSS 5.4≥ unspecified, ≤ 7.1.02019-03-07
CVE-2018-18816 [MEDIUM] CWE-79 CVE-2018-18816: The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Se
The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO
cvelistv5nvd
CVE-2018-18809MEDIUMCVSS 6.5KEVPoC≥ unspecified, ≤ 6.4.3v7.1.02019-03-07
CVE-2018-18809 [MEDIUM] CWE-22 CVE-2018-18809: The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO Jasper
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy,
cvelistv5nvd
CVE-2018-5429HIGHCVSS 8.8≥ unspecified, ≤ 6.4.22018-04-17
CVE-2018-5429 [HIGH] CVE-2018-5429: A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Serve
A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Ten
cvelistv5nvd
CVE-2018-5430HIGHCVSS 8.8KEVPoC≥ unspecified, ≤ 6.4.22018-04-17
CVE-2018-5430 [HIGH] CWE-22 CVE-2018-5430: The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the co
cvelistv5nvd
CVE-2018-5431MEDIUMCVSS 5.4≥ unspecified, ≤ 6.4.22018-04-17
CVE-2018-5431 [MEDIUM] CWE-79 CVE-2018-5431: The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperRepor
The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow, in the context of a non-default perm
cvelistv5nvd
CVE-2017-5533CRITICALCVSS 9.8v6.4.02017-11-15
CVE-2017-5533 [CRITICAL] CVE-2017-5533: A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Serve
A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the we
cvelistv5nvd
CVE-2017-5532MEDIUMCVSS 5.4v6.4.0 and below2017-11-15
CVE-2017-5532 [MEDIUM] CWE-79 CVE-2017-5532: A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports
A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO
cvelistv5nvd
CVE-2017-5528HIGHCVSS 8.8≥ unspecified, ≤ 6.3.02017-06-29
CVE-2017-5528 [HIGH] CWE-352 CVE-2017-5528: Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to
Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, a
cvelistv5nvd
CVE-2017-5529MEDIUMCVSS 6.5≥ unspecified, ≤ 6.3.02017-06-29
CVE-2017-5529 [MEDIUM] CWE-200 CVE-2017-5529: JasperReports library components contain an information disclosure vulnerability. This vulnerability
JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below),
cvelistv5nvd