185 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-41563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO...
Linux Distros Unpatched Vulnerability : CVE-2022-41562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIB...
Linux Distros Unpatched Vulnerability : CVE-2022-22771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO...
Linux Distros Unpatched Vulnerability : CVE-2018-5431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
Linux Distros Unpatched Vulnerability : CVE-2017-5532
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
Linux Distros Unpatched Vulnerability : CVE-2018-5430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
Linux Distros Unpatched Vulnerability : CVE-2017-5533
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...
Linux Distros Unpatched Vulnerability : CVE-2017-5528
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting XSS and cross-site request...
RHSA-2014:0389 Red Hat Security Advisory: jasperreports-server-pro security update
Bulletin has no description...
RHSA-2014:0037 Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update
Bulletin has no description...
CVE-2024-3325 JasperReports Server Driver upload vulnerability
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...
TIBCO Software Jaspersoft JasperReports Server Security Vulnerability
TIBCO Software Jaspersoft JasperReports Server is a report generation tool from TIBCO Software, USA. The product supports PDF, HTML, XLS, CSV and XML file output formats. A security vulnerability exists in TIBCO Software Jaspersoft JasperReports Server versions 8.0.4 through 9.0.0, which stems fr...
RHEL 7 : jasperreports-server-pro (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jackson-databind: Unsafe deserialization due to incomplete black list incomplete fix for CVE-2017-15095...
CVE-2024-3323
CVE-2024-3323 affects TIBCO JasperReports Server versions 8.0.4 and 8.2.0 (UI Request/Response Validation). The issue is a reflected Cross-Site Scripting vulnerability that allows injection of malicious scripts into a trusted app, potentially stealing a user’s active session cookie when a user cl...
CVE-2024-3323 Reflected Cross Site Scripting (XSS) vulnerability
Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, entici...
CVE-2024-3323 Reflected Cross Site Scripting (XSS) vulnerability
Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, entici...
TIBCO Software JasperReports Server 安全漏洞
TIBCO Software JasperReports Server is an embeddable reporting server from TIBCO Software, Inc. that provides reporting and analytics capabilities that can be embedded into web or mobile devices. A security vulnerability exists in TIBCO Software JasperReports Server version 8.0.4 and 8.2.0, which...
PT-2024-25174 · Tibco · Tibco Jasperreports Server
Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server affected versions not specified Description: The issue allows code execution to be exploited even without prior access to the system. Recommendations: At the moment, there is no information about a newer version tha...
TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3327
TIBCO JasperReports Server SQL Injection vulnerability Original release date: April 9, 2023 Last revised: --- CVE-2024-3327 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and below Component Affected Quer...
TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3326
TIBCO JasperReports Server Remote Code Execution RCE vulnerability Original release date: April 09, 2024 Last revised: --- CVE-2024-3326 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and below Component...