TIBCO Security Advisory: May 13, 2025 - TIBCO ActiveMatrix BusinessWorks - CVE-2025-3751

TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability Original release date: May 13, 2025 Last revised: --- CVE-2025-3751 Source: TIBCO Software Inc. Products Affected TIBCO ActiveMatrix BusinessWorks version 5.16.1 Component Affected UDDI Plugin “TIBCO Administrator” Description The...

TIBCO Security Advisory: November 26, 2024 -TIBCO ActiveMatrix BusinessWorks - CVE-2024-10512

TIBCO ActiveMatrix BusinessWorks – Path Traversal Vulnerability Original release date: November 26, 2024 Last revised: --- CVE-2024-10512 Source: TIBCO Software Inc. Products Affected TIBCO ActiveMatrix BusinessWorks version 6.10.0 Component Affected com.tibco.bw.thor.admin.feature Description A...

BIT-JASPERREPORTS-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...

BIT-JASPERREPORTS-2022-22773

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Serv...

CVE-2022-22775 TIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability

The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting XSS vulnerabilities that allow low privileged attackers with network access to execute scripts...

TIBCO Software JasperReports Server 跨站脚本漏洞

TIBCO Software JasperReports Server is an embeddable reporting server from TIBCO Software, Inc. that provides reporting and analytics capabilities that can be embedded into web or mobile devices. A security vulnerability exists in TIBCO Software JasperReports Server that could allow an attacker...

TIBCO Security Advisory: May 17, 2022 - TIBCO JasperReports Server -CVE-2022-22773

TIBCO JasperReports Server Reflected Cross Site Scripting XSS vulnerability Original release date: May 17,2022 Last revised: --- CVE-2022-22773 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.1 and below TIBCO JasperReports Server - Community Edition versions...

TIBCO Security Advisory: May 17, 2022 - TIBCO ActiveMatrix BPM -CVE-2022-22775

TIBCO ActiveMatrix BPM Reflected Cross Site Scripting XSS vulnerability Original release date: May 17, 2022 Last revised: --- CVE-2022-22775 Source: TIBCO Software Inc. Products Affected TIBCO BPM Enterprise versions 4.3.1 and below TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versio...

TIBCO Security Advisory: May 17, 2022 - TIBCO ActiveMatrix BPM -CVE-2022-22775

TIBCO ActiveMatrix BPM Reflected Cross Site Scripting XSS vulnerability Original release date: May 17, 2022 Last revised: --- CVE-2022-22775 Source: TIBCO Software Inc. Products Affected TIBCO BPM Enterprise versions 4.3.1 and below TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric versio...

Directory traversal

The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft...

PT-2022-15662 · Tibco · Tibco Jasperreports Server +5

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Library version 7.9.0 TIBCO JasperReports Library for ActiveMatrix BPM version 7.9.0 TIBCO JasperReports Server versions 7.9.0 through 7.9.1 TIBCO JasperReports Server for AWS Marketplace versions 7.9.0 through 7.9.1 TIBCO...

CVE-2021-35496 TIBCO JasperReports XML Eternal Entity (XXE) vulnerability

The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AW...

CVE-2021-35495 TIBCO JasperReports FTP Password exposed

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

The vulnerability of the Report Generator component in applications for creating reports with the TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM allows attackers to escalate their privileges.

The vulnerability of the Report Generator component in applications for creating reports, such as the TIBCO JasperReports Library, JasperReports Library for ActiveMatrix BPM, JasperReports Server, JasperReports Server for AWS Marketplace, and JasperReports Server for ActiveMatrix BPM, is related ...

CVE-2020-9410

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that...

CVE-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...

PT-2020-20641 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +2

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server versions 7.1.1 and below TIBCO JasperReports Server for AWS Marketplace versions 7.1.1 and below TIBCO JasperReports Server for ActiveMatrix BPM versions 7.1.1 and below Description: The administrative UI component ...

PT-2020-4877 · Tibco Software · Tibco Jasperreports Server For Aws Marketplace +5

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Library versions 7.1.1 and below, 7.2.0, 7.2.1, 7.3.0, 7.5.0 TIBCO JasperReports Library for ActiveMatrix BPM versions 7.1.1 and below TIBCO JasperReports Server versions 7.1.1 and below, 7.2.0, 7.5.0 TIBCO JasperReports...

CVE-2018-5429

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

CVE-2018-5431

The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...