Home/Product/tibco jaspersoft
Product

tibco jaspersoft

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2018-18816
<= 7.1.0
The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO
8.0HIGH
 CVE-2018-18815
<= 7.1.0
The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO Ja
10.0CRITICAL
 CVE-2018-18809
<= 7.1.0
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edit
6.5MEDIUM
 CVE-2018-18808
<= 7.1.0
The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition,
8.8HIGH
 CVE-2018-5431
<= 6.4.2
The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, T
6.3MEDIUM
 CVE-2018-5430
<= 6.4.2
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO Jasp
8.8HIGH
 CVE-2018-5429
<= 6.4.2
A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server
8.8HIGH
 CVE-2017-5533
all versions
A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO Jas
9.3CRITICAL
 CVE-2017-5532
<= 6.4.0
A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBC
5.4MEDIUM
 CVE-2017-14941
all versions
Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to
6.5MEDIUM
 CVE-2017-5528
<= 6.2.0
Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting
8.8HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin