Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-22773
HistoryMay 17, 2022 - 6:15 p.m.

CVE-2022-22773

2022-05-1718:15:08
CWE-79
[email protected]
web.nvd.nist.gov
3
tibco jasperreports server
cross site scripting
vulnerabilities
network access

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.0%

JSON

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains difficult to exploit Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim’s local system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 8.0.1 and below, TIBCO JasperReports Server - Community Edition: versions 8.0.1 and below, TIBCO JasperReports Server - Developer Edition: versions 8.0.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 8.0.1 and below, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.2 and below, and TIBCO JasperReports Server for Microsoft Azure: versions 8.0.1 and below.

Affected configurations

Nvd
Node
tibcojasperreports_serverRange≤7.9.2activematrix_bpm
OR
tibcojasperreports_serverRange<8.0.2aws_marketplace
OR
tibcojasperreports_serverRange<8.0.2microsoft_azure
OR
tibcojasperreports_serverRange<8.0.2--
OR
tibcojasperreports_serverRange<8.0.2community
OR
tibcojasperreports_serverRange<8.0.2developer
VendorProductVersionCPE
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:activematrix_bpm:*:*
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:aws_marketplace:*:*
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:microsoft_azure:*:*
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:-:-:*:*
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:community:*:*:*
tibcojasperreports_server*cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:developer:*:*:*

Related

tibco 2
cvelist 1
cve 1
prion 1
osv 1
tibco
tibco
TIBCO Security Advisory: May 17, 2022 - TIBCO JasperReports Server -CVE-2022-22773
2022-05-12 21:50:00
TIBCO Security Advisory: May 17, 2022 - TIBCO JasperReports Server -CVE-2022-22773
2022-05-12 21:50:00
cvelist
cvelist
CVE-2022-22773 TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability
2022-05-17 17:30:13
cve
cve
CVE-2022-22773
2022-05-17 18:15:08
prion
prion
Cross site scripting
2022-05-17 18:15:00
osv
osv
BIT-jasperreports-2022-22773
2024-03-06 10:55:37

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.0%

JSON
Related for NVD:CVE-2022-22773
tibco2cvelist1cve1prion1osv1