CVE-2017-5528

CVE-2017-5528 affects multiple TIBCO/JasperReports Server components where authorized users may perform XSS and CSRF attacks, potentially leading to partial disclosure of sensitive information. Affected are TIBCO JasperReports Server (versions <=6.1.1, 6.2.0, 6.2.1, 6.3.0), JasperReports Serve...

CVE-2017-5528

Removed by vendor...

RHEL 6 : Virtualization Manager (RHSA-2012:1537)

An updated jasperreports-server-pro package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Moderate: Red Hat Security Advisory: jasperreports-server-pro security and bug fix update

An updated jasperreports-server-pro package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2011-1911

CVE-2011-1911 affects JasperReports Server Community Project (JasperServer) versions 3.7.0 and 3.7.1. The root cause is a predictable _flowExecutionKey parameter, enabling CSRF via brute-forcing across requests. Impact described includes the ability for an attacker, tricking an authenticated user...