CVE-2018-18809

🗓️ 07 Mar 2019 22:29:00Reported by [email protected]Type

TIBCO JasperReports servers have a directory-traversal vulnerability CVE-2018-18809, allowing web server users to access host system contents

Reporter	Title	Published	Views	Family All 20
0day.today	Tibco JasperSoft Path Traversal Vulnerability	10 Sep 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: TIBCO JasperReports Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2020-9410, CVE-2018-18809)	6 Oct 202114:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple JasperReports Vulnerabilities Affect IBM Control Center (CVE-2020-9410, CVE-2018-18809)	16 Jun 202119:25	–	ibm
ATTACKERKB	TIBCO JasperReports Library Directory Traversal Vulnerability	7 Mar 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the server-side application library for creating reports from TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM arises from an incorrect limitation on the path to the restricted directory. This allows attackers to disclose sensitive information that should be protected.	1 Mar 202300:00	–	bdu_fstec
Circl	CVE-2018-18809	8 Mar 201900:21	–	circl
CISA KEV Catalog	TIBCO JasperReports Library Directory Traversal Vulnerability	29 Dec 202200:00	–	cisa_kev
CNVD	Multiple TIBCO Software Products Path Traversal Vulnerabilities	10 Sep 201900:00	–	cnvd
CVE	CVE-2018-18809	7 Mar 201922:00	–	cve
Cvelist	CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability	7 Mar 201922:00	–	cvelist

NVD

Node

tibco jasperreports_libraryRange≤6.4.21activematrix_bpm

tibco jasperreports_serverRange≤6.4.3activematrix_bpm

Node

tibco jaspersoftRange≤7.1.0aws_with_multi-tenancy

Source	Link
seclists	www.seclists.org/fulldisclosure/2019/Sep/17
cybersecurityworks	www.cybersecurityworks.com/zerodays/cve-2018-18809-tibco.html
securityfocus	www.securityfocus.com/bid/107351
packetstormsecurity	www.packetstormsecurity.com/files/154406/Tibco-JasperSoft-Path-Traversal.html
tibco	www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809
tibco	www.tibco.com/services/support/advisories
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
security	www.security.elarlang.eu/cve-2018-18809-path-traversal-in-tibco-jaspersoft.html

17 Jun 2026 01:47Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24

CVSS 3.16.5

CVSS 39.9

EPSS0.79064