Tibco
Tibco Jasperreports Server: vulnerabilidades y CVE
Tibco Jasperreports Server tiene 23 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 2 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses0
Críticas3
Explotadas activamente2
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-18809 | Media (6.5) | 79% | ⚠ Explotación activa | 7 mar 2019 | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
| CVE-2018-5430 | Alta (8.8) | 49% | ⚠ Explotación activa | 17 abr 2018 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-3323 | Alta (8.3) | 0.44% | — | 17 abr 2024 | Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead… |
| CVE-2022-41563 | Media (5.4) | 0.90% | — | 13 dic 2022 | The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO… |
| CVE-2022-41562 | Alta (8.4) | 0.74% | — | 13 dic 2022 | The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO… |
| CVE-2022-41561 | Alta (7.2) | 1.5% | — | 13 dic 2022 | The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO… |
| CVE-2022-22773 | Media (5.4) | 0.51% | — | 17 may 2022 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace,… |
| CVE-2022-22771 | Alta (8.8) | 2.5% | — | 15 mar 2022 | The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO… |
| CVE-2021-35496 | Alta (7.5) | 0.64% | — | 12 oct 2021 | The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition,… |
| CVE-2021-35495 | Alta (8.8) | 0.83% | — | 12 oct 2021 | The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition,… |
| CVE-2021-35494 | Media (5.3) | 0.50% | — | 12 oct 2021 | The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO… |
| CVE-2020-9410 | Alta (8.8) | 5.2% | — | 20 may 2020 | The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and… |
| CVE-2020-9409 | Crítica (9.8) | 3.4% | — | 20 may 2020 | The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that… |
| CVE-2019-8986 | Alta (7.7) | 1.0% | — | 7 mar 2019 | The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to… |
| CVE-2018-18816 | Media (5.4) | 1.2% | — | 7 mar 2019 | The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy,… |
| CVE-2018-18815 | Crítica (9.8) | 3.1% | — | 7 mar 2019 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2018-18809 | Media (6.5) | 79% | ⚠ Explotación activa | 7 mar 2019 | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
| CVE-2018-18808 | Alta (7.5) | 1.7% | — | 7 mar 2019 | The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with… |
| CVE-2018-5431 | Media (5.4) | 0.59% | — | 17 abr 2018 | The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with… |
| CVE-2018-5430 | Alta (8.8) | 49% | ⚠ Explotación activa | 17 abr 2018 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2018-5429 | Alta (8.8) | 1.5% | — | 17 abr 2018 | A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports… |
| CVE-2017-5533 | Crítica (9.8) | 2.0% | — | 15 nov 2017 | A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2017-5532 | Media (5.4) | 0.69% | — | 15 nov 2017 | A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO… |
| CVE-2017-5529 | Media (6.5) | 1.3% | — | 29 jun 2017 | JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO… |
| CVE-2017-5528 | Alta (8.8) | 0.57% | — | 29 jun 2017 | Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Tibco
Spotfire Server · 29Spotfire Analytics Platform FOR AWS · 20Rendezvous · 16Spotfire Analyst · 13Enterprise Message Service · 12Jaspersoft Reporting AND Analytics · 10Spotfire Desktop · 10Jaspersoft · 10Managed File Transfer Command Center · 10Managed File Transfer Internet Server · 10Runtime Agent · 9EBX Add-ons · 9