TIBCO Software Inc. TIBCO JasperReports Server for ActiveMatrix BPM
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-22773 | unspecified – 7.9.2 | TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability | HIGH 7.7 | 0.5 % | ||
| CVE-2022-22771 | 7.9.0 ; 7.9.1 | TIBCO JasperReports Library Directory Traversal Vulnerability | CRITICAL 9.9 | 2.4 % | ||
| CVE-2021-35496 | | TIBCO JasperReports XML Eternal Entity (XXE) vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2021-35495 | | TIBCO JasperReports FTP Password exposed | CRITICAL 9.0 | 0.8 % | ||
| CVE-2021-35494 | | TIBCO JasperReports unauthorized access to temporary object | MEDIUM 5.7 | 0.5 % | ||
| CVE-2020-9410 | unspecified – 7.1.1 | TIBCO JasperReports Library | HIGH 8.8 | 5.4 % | ||
| CVE-2020-9409 | unspecified – 7.1.1 | TIBCO JasperReports Server Fails To Enforce Access Restrictions | CRITICAL 9.8 | 3.5 % | ||
| CVE-2019-8986 | unspecified – 6.4.3 | TIBCO JasperReports Server XML Entity Expansion Vulnerability | HIGH 7.7 | 1.0 % | ||
| CVE-2018-18816 | unspecified – 6.4.3 | TIBCO JasperReports Persistent Cross Site Scripting Vulnerability | HIGH 8.0 | 1.2 % | ||
| CVE-2018-18815 | unspecified – 6.4.3 | TIBCO JasperReports Server User Information Disclosure | CRITICAL 10.0 | 3.1 % | ||
| CVE-2018-18809 | | TIBCO JasperReports Library Directory Traversal Vulnerability | CRITICAL 9.9 | 79 % | KEV | |
| CVE-2018-18808 | unspecified – 6.4.3 | TIBCO JasperReports Server Privilege Escalation Via Race Condition | HIGH 8.8 | 1.7 % | ||
| CVE-2018-5431 | unspecified – 6.4.2 | TIBCO JasperReports Server Cross Site Scripting Vulnerability | MEDIUM 6.3 | 0.6 % | ||
| CVE-2018-5430 | unspecified – 6.4.2 | TIBCO JasperReports Server Information Disclosure Vulnerability | HIGH 8.8 | 48 % | KEV | |
| CVE-2018-5429 | unspecified – 6.4.2 | TIBCO JasperReports Library Code Sandboxing Problem | HIGH 8.8 | 1.5 % | ||
| CVE-2017-5533 | 6.4.0 | TIBCO JasperReports Server credentials disclosure | CRITICAL 9.8 | 2.2 % | ||
| CVE-2017-5532 | 6.4.0 and below | TIBCO JasperReports persistent cross site scripting | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-5529 | | TIBCO JasperReports Library Information Disclosure | MEDIUM 6.5 | 1.3 % | ||
| CVE-2017-5528 | unspecified – 6.2.0 | TIBCO JasperReports Server cross-site vulnerabilities | HIGH 8.8 | 0.6 % |