Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2017-14941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source...

6.5CVSS6.6AI score0.01039EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2017/11/07 9:19 a.m.•36 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS3.9AI score0.01039EPSS
SaveExploits2References1
Prion
Prion
•added 2017/10/02 1:29 a.m.•26 views

Design/Logic Flaw

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

4CVSS6.2AI score0.01039EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/02 12:00 a.m.•6 views

CVE-2017-14941: Exposure of Sensitive Information to an Unauthorized Actor

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

6.5CVSS6.7AI score0.01039EPSS
SaveExploits2References2
Mend
Mend
•added 2017/10/01 3:00 a.m.•2 views

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

7.1CVSS0.01039EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2017/10/01 12:00 a.m.•4 views

PT-2017-13766

Name of the Vulnerable Software and Affected Versions Jaspersoft JasperReports version 4.7 Description The issue allows a remote authenticated user to disclose saved credentials by accessing the "flow.html" page and reading the HTML source code when editing a Data Source connector. Recommendation...

6.5CVSS0.01039EPSS
SaveExploits2References6
Rows per page
Query Builder