Approved changes feed: RSS · Atom

cpe:2.3:a:tibco:jasperreports_library:6.3.1:*:*:*:*:*:*:*

part: a version: 6.3.1 update: *

VendorTibco (92ae8683-1e4a-52cf-ae60-583c5fda0048)
ProductJasperreports Library (1cac3684-22d0-5be9-aa13-af2fd248f259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jasperreports purl2cpe 2026-06-01 10:11:21.618682
pkg:github/tibcosoftware/jasperreports purl2cpe 2026-06-01 10:11:21.618683
pkg:maven/net.sf.jasperreports/jasperreports purl2cpe 2026-06-01 10:11:21.618685
pkg:sourceforge/jasperreports purl2cpe 2026-06-01 10:11:21.618686

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5532 vulnerable 2026-06-08 05:09:47.149721 TIBCO JasperReports persistent cross site scripting
MEDIUM (5.4)
A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 and below.
Published: 2017-11-15T21:00:00.000Z
Updated: 2024-09-16T20:48:07.136Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.