Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

163 matches found

Prion
Prion•added 2019/03/07 10:29 p.m.•19 views

Race condition

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

8.5CVSS7.7AI score0.01737EPSS
Exploits0References3Affected Software3
NVD
NVD•added 2019/03/07 10:29 p.m.•19 views

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7.5AI score0.01058EPSS
Exploits0References2
Prion
Prion•added 2019/03/07 10:29 p.m.•13 views

Design/Logic Flaw

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

4CVSS7.4AI score0.01058EPSS
Exploits0References2Affected Software1
OSV
OSV•added 2019/03/07 10:29 p.m.•2 views

CVE-2018-18809

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

6.5CVSS5.7AI score0.79836EPSS
Exploits4References8
OSV
OSV•added 2019/03/07 10:29 p.m.•1 views

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

7.5CVSS5.7AI score
Exploits0References3
OSV
OSV•added 2019/03/07 10:29 p.m.•2 views

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7AI score0.01058EPSS
Exploits0References2
CVE
CVE•added 2019/03/07 10:0 p.m.•50 views

CVE-2019-8986

The CVE-2019-8986 entry concerns a vulnerability in the SOAP API component of TIBCO JasperReports Server and JasperReports Server for ActiveMatrix BPM. Affected releases include JasperReports Server up to 6.3.4, 6.4.0–6.4.3 and ActiveMatrix BPM variant up to 6.4.3. The issue may allow a malicious...

7.7CVSS7.5AI score0.01058EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•20 views

CVE-2019-8986 TIBCO JasperReports Server XML Entity Expansion Vulnerability

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7.5AI score0.01058EPSS
Exploits0References2
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•19 views

CVE-2018-18808 TIBCO JasperReports Server Privilege Escalation Via Race Condition

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

8.8CVSS8.9AI score0.01737EPSS
Exploits0References3
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•23 views

CVE-2018-18816 TIBCO JasperReports Persistent Cross Site Scripting Vulnerability

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross si...

8CVSS7.7AI score0.01258EPSS
Exploits0References3
CVE
CVE•added 2019/03/07 10:0 p.m.•628 views

CVE-2018-18809

TIBCO JasperReports Library and related JasperReports Server components are affected by a directory traversal vulnerability (CVE-2018-18809) in their default server implementations. The issue could allow web server users to access contents of the host system via specially crafted URL requests con...

9.9CVSS7.4AI score0.79836EPSS
In wildExploits4References8Affected Software2
ATTACKERKB
ATTACKERKB•added 2019/03/07 12:0 a.m.•21 views

TIBCO JasperReports Library Directory Traversal Vulnerability

The default server implementation of TIBCO Software Inc.’s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

9.9CVSS6.6AI score0.79836EPSS
In wildExploits4References8
Positive Technologies
Positive Technologies•added 2019/03/07 12:0 a.m.•3 views

PT-2019-6316 · Tibco Software · Tibco Jaspersoft Reporting/Analytics For Aws +7

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Library versions up to and including 7.2.0 TIBCO JasperReports Library Community Edition versions up to and including 6.7.0 TIBCO JasperReports Library for ActiveMatrix BPM versions up to and including 6.4.21 TIBCO...

9.9CVSS9.4AI score0.79836EPSS
Exploits4References12
OSV
OSV•added 2018/08/08 2:29 p.m.•3 views

CVE-2018-12408

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity XXE attacks via incomin...

7.5CVSS5.7AI score0.02377EPSS
Exploits0References3
NVD
NVD•added 2018/08/08 2:29 p.m.•20 views

CVE-2018-12408

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity XXE attacks via incomin...

7.5CVSS7.5AI score0.02377EPSS
Exploits0References3
Cvelist
Cvelist•added 2018/08/08 2:0 p.m.•20 views

CVE-2018-12408 TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity XXE attacks via incomin...

7.5CVSS7.5AI score0.02377EPSS
Exploits0References3
CVE
CVE•added 2018/08/08 2:0 p.m.•46 views

CVE-2018-12408

The CVE-2018-12408 entry describes an XXE vulnerability in the BusinessWorks engine components of TIBCO ActiveMatrix BusinessWorks, including the main BusinessWorks product, the z/Linux variant, and the Silver Fabric distribution, all affected up to version 5.13.0. The root cause is an XML Extern...

7.5CVSS7.5AI score0.02377EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve•added 2018/04/17 6:29 p.m.•25 views

CVE-2018-5431

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

6.3CVSS6.4AI score0.00602EPSS
Exploits0References2
UbuntuCve
UbuntuCve•added 2018/04/17 6:29 p.m.•24 views

CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS7.2AI score0.48753EPSS
Exploits2References3
OSV
OSV•added 2018/04/17 6:29 p.m.•5 views

CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS5.7AI score0.48753EPSS
Exploits2References4
Rows per page
Query Builder