Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

104 matches found

zdt
zdt•added 2019/09/10 12:00 a.m.•100 views

Tibco JasperSoft Path Traversal Vulnerability

Exploit for multiple platform in category web applications Title: CVE-2018-18809 Path traversal in Tibco JasperSoft Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: Tibco JasperSoft https://www.jaspersoft.com/ Vulnerability: Path traversal CVE: CVE-2018-18809 Path traversal...

4CVSS0.3AI score0.79064EPSS
SaveExploits5
Packet Storm
Packet Storm•added 2019/09/09 12:00 a.m.•353 views

Tibco JasperSoft Path Traversal

Title: CVE-2018-18809 Path traversal in Tibco JasperSoft Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: Tibco JasperSoft https://www.jaspersoft.com/ Vulnerability: Path traversal CVE: CVE-2018-18809 Path traversal Vulnerability is in reportresource/reportresource/ service and in...

4CVSS6.8AI score0.79064EPSS
SaveExploits5
Zero Day Initiative
Zero Day Initiative•added 2019/04/02 12:00 a.m.•49 views

Jaspersoft JasperReports Server DiagnosticDataCipherer Hard-coded Cryptographic Key Information Disclosure Vulnerability

This vulnerability allows the decryption of the passwords on vulnerable installations of Jaspersoft JasperReports Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within encryption of user passwords in the DiagnosticDataCipherer class. A hard-coded...

6.2CVSS3.3AI score0.03132EPSS
SaveExploits0References1
OSV
OSV•added 2019/03/07 10:29 p.m.•13 views

CVE-2018-18809

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

6.5CVSS5.7AI score0.79064EPSS
SaveExploits5References8
OSV
OSV•added 2019/03/07 10:29 p.m.•14 views

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

7.5CVSS5.7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2019/03/07 12:00 a.m.•2 views

PT-2019-9634

Name of the Vulnerable Software and Affected Versions TIBCO JasperReports Server versions up to and including 7.1.0 TIBCO JasperReports Server Community Edition versions up to and including 7.1.0 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.3 TIBCO Jaspersoft f...

8.8CVSS0.01705EPSS
SaveExploits0References5
attackerkb
attackerkb•added 2019/03/07 12:00 a.m.•109 views

TIBCO JasperReports Library Directory Traversal Vulnerability

The default server implementation of TIBCO Software Inc.’s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

9.9CVSS6.6AI score0.79064EPSS
SaveIn wildExploits5References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2019/03/07 12:00 a.m.•5 views

CVE-2018-18809: Improper Limitation of a Pathname to a Restricted Directory

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

9.9CVSS8.2AI score0.79064EPSS
SaveExploits5References2
Zero Day Initiative
Zero Day Initiative•added 2019/03/06 12:00 a.m.•51 views

Jaspersoft JasperReports Server ResourceForwardingServlet URI Improper Access Control Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Jaspersoft JasperReports Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the doGet method of the ResourceForwardingServlet. The issue resul...

7.5CVSS2.2AI score0.03132EPSS
SaveExploits0References1
zdt
zdt•added 2018/05/15 12:00 a.m.•84 views

JasperReports - Authenticated File Read Vulnerability

Exploit for multiple platform in category web applications TIBCO’s JasperReports string = wrapper.getParameterValues"page" To: getResource @ DirResourceSet.java:101 file = new File/home/rhino/jasperreports...mcat/webapps/jasperserver,"/WEB-INF/jsp/modules/administer/adminImport.jsp" Due to a lack...

0.48054EPSS
SaveExploits3
NVD
NVD•added 2018/04/17 6:29 p.m.•32 views

CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS8AI score0.48054EPSS
SaveExploits3References4
OSV
OSV•added 2018/04/17 6:29 p.m.•16 views

CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS5.7AI score0.48054EPSS
SaveExploits3References4
UbuntuCve
UbuntuCve•added 2018/04/17 6:29 p.m.•29 views

CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

8.8CVSS7.2AI score0.48054EPSS
SaveExploits3References3
Cvelist
Cvelist•added 2018/04/17 6:00 p.m.•51 views

CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

7.7CVSS8.5AI score0.48054EPSS
SaveExploits3References3
CVE
CVE•added 2018/04/17 6:00 p.m.•89 views

CVE-2018-5429

CVE-2018-5429 affects multiple TIBCO JasperReports products (Server, Library, Studio and related editions) where the report scripting component may allow analytic reports with scripting to execute arbitrary code. The vulnerability is due to a flaw in the report scripting component and impacts a w...

8.8CVSS8.7AI score0.01525EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE•added 2018/04/17 6:00 p.m.•63 views

CVE-2018-5430

Removed by vendor...

8.8CVSS7.9AI score0.48054EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2018/04/17 12:00 a.m.•9 views

CVE-2018-5429: Undefined Security Weakness

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

8.8CVSS8AI score0.01525EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2018/04/17 12:00 a.m.•4 views

PT-2018-16949

Name of the Vulnerable Software and Affected Versions TIBCO JasperReports Server versions up to and including 6.4.2 TIBCO JasperReports Server Community Edition versions up to and including 6.4.2 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.2 TIBCO JasperReport...

8.8CVSS0.01525EPSS
SaveExploits0References6
OSV
OSV•added 2017/11/15 9:29 p.m.•15 views

UBUNTU-CVE-2017-5532

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy...

5.4CVSS5.7AI score0.00687EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/11/15 9:00 p.m.•49 views

CVE-2017-5533 TIBCO JasperReports Server credentials disclosure

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability whic...

9.3CVSS9.4AI score0.02176EPSS
SaveExploits0References6
Rows per page
Query Builder