Tibco
Tibco Jaspersoft: vulnerabilidades y CVE
Tibco Jaspersoft tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 2 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas2
Explotadas activamente2
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-18809 | Media (6.5) | 79% | ⚠ Explotación activa | 7 mar 2019 | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
| CVE-2018-5430 | Alta (8.8) | 49% | ⚠ Explotación activa | 17 abr 2018 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-18816 | Media (5.4) | 1.2% | — | 7 mar 2019 | The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy,… |
| CVE-2018-18815 | Crítica (9.8) | 3.1% | — | 7 mar 2019 | The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2018-18809 | Media (6.5) | 79% | ⚠ Explotación activa | 7 mar 2019 | The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
| CVE-2018-18808 | Alta (7.5) | 1.7% | — | 7 mar 2019 | The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with… |
| CVE-2018-5431 | Media (5.4) | 0.59% | — | 17 abr 2018 | The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with… |
| CVE-2018-5430 | Alta (8.8) | 49% | ⚠ Explotación activa | 17 abr 2018 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2018-5429 | Alta (8.8) | 1.5% | — | 17 abr 2018 | A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports… |
| CVE-2017-5533 | Crítica (9.8) | 2.0% | — | 15 nov 2017 | A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and… |
| CVE-2017-5532 | Media (5.4) | 0.69% | — | 15 nov 2017 | A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO… |
| CVE-2017-5528 | Alta (8.8) | 0.57% | — | 29 jun 2017 | Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Tibco
Spotfire Server · 29Jasperreports Server · 23Spotfire Analytics Platform FOR AWS · 20Rendezvous · 16Spotfire Analyst · 13Enterprise Message Service · 12Jaspersoft Reporting AND Analytics · 10Spotfire Desktop · 10Managed File Transfer Command Center · 10Managed File Transfer Internet Server · 10Runtime Agent · 9EBX Add-ons · 9