Lucene search

CVE-2017-5532 TIBCO JasperReports persistent cross site scripting

🗓️ 15 Nov 2017 21:00:00Reported by tibcoType

TIBCO JasperReports Server XSS vulnerabilit

Reporter	Title	Published	Views	Family All 6
OpenVAS	TIBCO JasperReports XSS Vulnerability (Nov 2017)	23 Nov 201700:00	–	openvas
Debian CVE	CVE-2017-5532	15 Nov 201721:29	–	debiancve
NVD	CVE-2017-5532	15 Nov 201721:29	–	nvd
UbuntuCve	CVE-2017-5532	15 Nov 201700:00	–	ubuntucve
Prion	Cross site scripting	15 Nov 201721:29	–	prion
CVE	CVE-2017-5532	15 Nov 201721:29	–	cve

[
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.3 and below"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.1"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server Community Edition",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0 and below"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0 and below"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Library",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.3 and below"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.1"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      },
      {
        "status": "affected",
        "version": "6.4.1"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Library for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.1 and below"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft for AWS with Multi-Tenancy",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0 and below"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Reporting and Analytics for AWS",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0 and below"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Studio",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.3 and below"
      },
      {
        "status": "affected",
        "version": "6.3.0"
      },
      {
        "status": "affected",
        "version": "6.3.1"
      },
      {
        "status": "affected",
        "version": "6.3.2"
      },
      {
        "status": "affected",
        "version": "6.4.0"
      }
    ]
  },
  {
    "product": "TIBCO Jaspersoft Studio for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.0 and below"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/101873
tibco	www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-2017-5532

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Nov 2017 21:00Current

5.1Medium risk

Vulners AI Score5.1

CVSS35.4

EPSS0.001