Arbitrary Code Execution Vulnerability in Report Scripting Component of Multiple TIBCO Products

TIBCO JasperReports Server and so on are products of TIBCO Software, Inc. TIBCO JasperReports Server is a server version of the report generation and editing tool, and TIBCO JasperReports Server Community Edition is its community edition. report scripting is one of the report scripting components...

Design/Logic Flaw

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

CVE-2018-5429

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

CVE-2018-5429

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

PT-2018-16949

Name of the Vulnerable Software and Affected Versions TIBCO JasperReports Server versions up to and including 6.4.2 TIBCO JasperReports Server Community Edition versions up to and including 6.4.2 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.2 TIBCO JasperReport...

CVE-2018-5429: Undefined Security Weakness

A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports...

CVE-2017-10078

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Scripting. The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2017-3549

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite subcomponent: Scripting Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows an unauthorized attacker to compromise data confidentiality and integrity by using the scripting component...

Mac OS X Script Library Load

The vulnerability of the OSA Scripts component in the Mac OS X operating system is related to the use of an insecure search path. Exploiting this vulnerability allows a remote attacker to load arbitrary script libraries...

PT-2014-1229

Name of the Vulnerable Software and Affected Versions Java SE 8 Description The issue allows a remote attacker to compromise data confidentiality and integrity using the Scripting component. It affects the Java Runtime Environment and Java Development Kit, allowing exploitation via unknown vector...