Jasperreports Server vulnerabilities | LiveThreat CVE Feed

Product

Jasperreports Server

by Tibco · last CVE Dec 13, 2022

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 3High 11Medium 8Low 0

Severity

All severities22 Critical3 High11 Medium8 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Jasperreports Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-5430 In wildKEV	8.8	48%	Apr 17	TIBCO JasperReports Server Information Disclosure Vulnerability Affected: through 6.2.4; through 6.4.2; through 6.4.2; 6.3.0; 6.3.2; 6.3.3; +2 more
CVE-2022-22771	8.8	2%	Mar 15	The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server… Affected: 7.9.0; 7.9.0; 7.9.0; 7.9.0; 7.9.1; 7.9.1; +2 more
CVE-2021-35495	8.8	1%	Oct 12	The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO… Affected: through 7.2.1; through 7.8.0; through 7.8.0; through 7.9.0; through 7.9.0; through 7.9.0; +4 more
CVE-2020-9410	8.8	5%	May 20	The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… Affected: through 7.1.1; through 7.1.1; through 7.5.0; 7.2.0; 7.5.0
CVE-2018-5429	8.8	2%	Apr 17	A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for… Affected: through 6.2.4; through 6.4.2; through 6.4.2; 6.3.0; 6.3.2; 6.3.3; +2 more
CVE-2017-5528	8.8	1%	Jun 29	Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF)… Affected: through 6.1.1; 6.2.0; 6.2.1; 6.3.0; through 6.3.0; through 6.2.0
CVE-2022-41562	8.4	1%	Dec 13	The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports… Affected: through 8.0.2; through 8.0.2; through 8.0.2; through 8.1.0; through 8.1.0; 8.1.0; +2 more
CVE-2019-8986	7.7	1%	Mar 7	TIBCO JasperReports Server XML Entity Expansion Vulnerability Affected: through 6.3.4; through 6.4.3; 6.4.0; 6.4.1; 6.4.2; 6.4.3
CVE-2021-35496	7.5	1%	Oct 12	The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO… Affected: through 7.2.1; through 7.8.0; through 7.8.0; through 7.9.0; through 7.9.0; through 7.9.0; +4 more
CVE-2018-18808	7.5	2%	Mar 7	TIBCO JasperReports Server Privilege Escalation Via Race Condition Affected: through 6.3.4; through 6.4.3; through 7.1.0; 6.4.0; 6.4.1; 6.4.2; +2 more
CVE-2022-41561	7.2	2%	Dec 13	The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO… Affected: through 8.0.2; through 8.0.2; through 8.0.2; through 8.1.0; through 8.1.0; 8.1.0; +2 more