Jasperreports Server
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tibco (92ae8683-1e4a-52cf-ae60-583c5fda0048) |
|---|---|
| Product | Jasperreports Server (dfa3c780-8377-50a3-b3bf-2a1555b849d8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3325 |
vulnerable | 2026-06-08 06:41:52.940963 |
JasperReports Server Driver upload vulnerability
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.
Published: 2024-07-10T17:02:14.138Z
Updated: 2024-08-01T20:05:08.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3323 |
vulnerable | 2026-06-08 06:41:52.940545 |
Reflected Cross Site Scripting (XSS) vulnerability
HIGH (8.3)
Cross Site Scripting in
UI Request/Response Validation
in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
Published: 2024-04-17T18:53:21.348Z
Updated: 2024-08-01T20:05:08.445Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8986 |
vulnerable | 2026-06-08 05:14:24.795141 |
TIBCO JasperReports Server XML Entity Expansion Vulnerability
HIGH (7.7)
The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-09-17T03:37:40.244Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5431 |
vulnerable | 2026-06-08 05:11:50.948821 |
TIBCO JasperReports Server Cross Site Scripting Vulnerability
MEDIUM (6.3)
The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow, in the context of a non-default permissions configuration, persisted cross-site scripting (XSS) attacks. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.
Published: 2018-04-17T18:00:00.000Z
Updated: 2024-09-17T01:56:35.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5430 |
vulnerable | 2026-06-08 05:11:50.944112 |
TIBCO JasperReports Server Information Disclosure Vulnerability
HIGH (7.7)
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3;6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.
Published: 2018-04-17T18:00:00.000Z
Updated: 2025-10-21T23:45:52.130Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5429 |
vulnerable | 2026-06-08 05:11:50.920401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18816 |
vulnerable | 2026-06-08 05:11:14.784794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18808 |
vulnerable | 2026-06-08 05:11:14.720429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5532 |
vulnerable | 2026-06-08 05:09:47.144330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5529 |
vulnerable | 2026-06-08 05:09:47.123824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5528 |
vulnerable | 2026-06-08 05:09:47.111428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.