CVE-2020-9410 TIBCO JasperReports Library

🗓️ 20 May 2020 12:25:13Reported by tibcoType

Vulnerability in TIBCO JasperReports Library for HTML injectio

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: TIBCO JasperReports Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2020-9410, CVE-2018-18809)	6 Oct 202114:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple JasperReports Vulnerabilities Affect IBM Control Center (CVE-2020-9410, CVE-2018-18809)	16 Jun 202119:25	–	ibm
BDU FSTEC	The vulnerability of the Report Generator component in applications for creating reports with the TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM allows attackers to escalate their privileges.	26 Nov 202000:00	–	bdu_fstec
CVE	CVE-2020-9410	20 May 202012:25	–	cve
EUVD	EUVD-2020-30230	7 Oct 202500:30	–	euvd
NVD	CVE-2020-9410	20 May 202013:15	–	nvd
OpenVAS	TIBCO JasperReports <= 7.1.1, 7.2.0, 7.5.0 HTML Injection Vulnerability	28 May 202000:00	–	openvas
Oracle	Oracle Critical Patch Update Advisory - October 2020	20 Oct 202000:00	–	oracle
OSV	BIT-JASPERREPORTS-2020-9410	6 Mar 202410:59	–	osv
OSV	CVE-2020-9410	20 May 202013:15	–	osv

[
  {
    "product": "TIBCO JasperReports Library",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.2.0"
      },
      {
        "status": "affected",
        "version": "7.2.1"
      },
      {
        "status": "affected",
        "version": "7.3.0"
      },
      {
        "status": "affected",
        "version": "7.5.0"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Library for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.2.0"
      },
      {
        "status": "affected",
        "version": "7.5.0"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for AWS Marketplace",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.5.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TIBCO JasperReports Server for ActiveMatrix BPM",
    "vendor": "TIBCO Software Inc.",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpuoct2020.html
tibco	www.tibco.com/services/support/advisories

20 Oct 2020 21:15Current

9High risk

Vulners AI Score9

CVSS 3.17.3

EPSS0.00907