Jasperreports Server
Approved changes feed: RSS · Atom
cpe:2.3:a:tibco:jasperreports_server:8.2.0:*:*:*:*:*:*:*
part: a version: 8.2.0 update: *
| Vendor | Tibco (92ae8683-1e4a-52cf-ae60-583c5fda0048) |
|---|---|
| Product | Jasperreports Server (dfa3c780-8377-50a3-b3bf-2a1555b849d8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3323 |
vulnerable | 2026-06-08 06:41:52.939797 |
Reflected Cross Site Scripting (XSS) vulnerability
HIGH (8.3)
Cross Site Scripting in
UI Request/Response Validation
in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
Published: 2024-04-17T18:53:21.348Z
Updated: 2024-08-01T20:05:08.445Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.