Jaspersoft Reporting And Analytics vulnerabilities

Product

Jaspersoft Reporting And Analytics

by Tibco · last CVE Mar 7, 2019

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 2High 4Medium 4Low 0

Severity

All severities10 Critical2 High4 Medium4 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Jaspersoft Reporting And Analytics to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-5430 In wildKEV	8.8	48%	Apr 17	TIBCO JasperReports Server Information Disclosure Vulnerability Affected: through 6.4.2
CVE-2018-18809 In wildKEV	6.5	79%	Mar 7	TIBCO JasperReports Library Directory Traversal Vulnerability Affected: through 7.1.0
CVE-2018-18815	9.8	3%	Mar 7	TIBCO JasperReports Server User Information Disclosure Affected: through 7.1.0
CVE-2017-5533	9.8	2%	Nov 15	A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO… Affected: 6.4.0
CVE-2018-5429	8.8	2%	Apr 17	A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for… Affected: through 6.4.2
CVE-2017-5528	8.8	1%	Jun 29	Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF)… Affected: through 6.2.0
CVE-2018-18808	7.5	2%	Mar 7	TIBCO JasperReports Server Privilege Escalation Via Race Condition Affected: through 7.1.0
CVE-2018-18816	5.4	1%	Mar 7	TIBCO JasperReports Persistent Cross Site Scripting Vulnerability Affected: through 7.1.0
CVE-2018-5431	5.4	1%	Apr 17	The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM,… Affected: through 6.4.2
CVE-2017-5532	5.4	1%	Nov 15	A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM,… Affected: through 6.4.0