Jaspersoft

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-5431 MEDIUM This Month

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Jasperreports Server Jaspersoft Jaspersoft Reporting And Analytics

NVD

CVSS 3.0

5.4

EPSS

0.6%

CVE-2018-5430 HIGH POC KEV THREAT This Week

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Path Traversal Jasperreports Server Jaspersoft Jaspersoft Reporting And Analytics

NVD Exploit-DB

CVSS 3.1

8.8

EPSS

48.8%

CVE-2018-5429 HIGH This Week

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Jasperreports Server Jasperreports Library Jaspersoft Jaspersoft Reporting And Analytics +1

NVD

CVSS 3.0

8.8

EPSS

1.6%

CVE-2017-5533 CRITICAL Act Now

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Jasperreports Server Jaspersoft Jaspersoft Reporting And Analytics

NVD

CVSS 3.0

9.3

EPSS

0.5%

CVE-2017-5532 MEDIUM This Month

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable. No vendor patch available.

XSS Jasperreports Server Jasperreports Library Jaspersoft Jaspersoft Reporting And Analytics +1

NVD

CVSS 3.0

5.4

EPSS

0.3%

CVE-2017-5528 HIGH This Week

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS CSRF Jasperreports Server Jaspersoft Jaspersoft Reporting And Analytics

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2018-5431

EPSS 1% CVSS 5.4

MEDIUM This Month

XSS Jasperreports Server Jaspersoft +1

NVD

CVE-2018-5430

EPSS 49% CVSS 8.8

HIGH POC KEV THREAT This Week

Java Path Traversal Jasperreports Server +2

NVD Exploit-DB

CVE-2018-5429

EPSS 2% CVSS 8.8

HIGH This Week

RCE Jasperreports Server Jasperreports Library +3

NVD

CVE-2017-5533

EPSS 1% CVSS 9.3

CRITICAL Act Now

Information Disclosure Jasperreports Server Jaspersoft +1

NVD

CVE-2017-5532

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Jasperreports Server Jasperreports Library +3

NVD

CVE-2017-5528

EPSS 0% CVSS 8.8

HIGH This Week

XSS CSRF Jasperreports Server +2

NVD