Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

299 matches found

NVD
NVD•added 2019/03/07 10:29 p.m.•16 views

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

8.8CVSS8.9AI score0.01705EPSS
SaveExploits0References3
OSV
OSV•added 2019/03/07 10:29 p.m.•3 views

CVE-2018-18809

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

6.5CVSS5.7AI score0.79064EPSS
SaveExploits4References8
OSV
OSV•added 2019/03/07 10:29 p.m.•6 views

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7AI score0.01039EPSS
SaveExploits0References2
OSV
OSV•added 2019/03/07 10:29 p.m.•2 views

CVE-2018-18808

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

7.5CVSS5.7AI score
SaveExploits0References3
Prion
Prion•added 2019/03/07 10:29 p.m.•17 views

Cross site scripting

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross si...

3.5CVSS5.4AI score0.01234EPSS
SaveExploits0References3Affected Software3
Prion
Prion•added 2019/03/07 10:29 p.m.•15 views

Directory traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

4CVSS6.4AI score0.79064EPSS
SaveExploits4References7Affected Software4
NVD
NVD•added 2019/03/07 10:29 p.m.•22 views

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7.5AI score0.01039EPSS
SaveExploits0References2
NVD
NVD•added 2019/03/07 10:29 p.m.•33 views

CVE-2018-18815

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability tha...

10CVSS9.6AI score0.03132EPSS
SaveExploits0References5
Prion
Prion•added 2019/03/07 10:29 p.m.•17 views

Design/Logic Flaw

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

4CVSS7.4AI score0.01039EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2019/03/07 10:0 p.m.•10 views

CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

9.9CVSS6.8AI score0.79064EPSS
SaveExploits4References7
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•25 views

CVE-2019-8986 TIBCO JasperReports Server XML Entity Expansion Vulnerability

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

7.7CVSS7.5AI score0.01039EPSS
SaveExploits0References2
CVE
CVE•added 2019/03/07 10:0 p.m.•68 views

CVE-2018-18808

The CVE-2018-18808 entry describes a race-condition vulnerability in the domain management component of TIBCO JasperReports Server and related products (Server, Community Edition, ActiveMatrix BPM, AWS with Multi-Tenancy, and AWS Reporting/Analytics). Affected releases include multiple 6.x and 7....

8.8CVSS7.9AI score0.01705EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2019/03/07 10:0 p.m.•638 views

CVE-2018-18809

TIBCO JasperReports Library and related JasperReports Server components are affected by a directory traversal vulnerability (CVE-2018-18809) in their default server implementations. The issue could allow web server users to access contents of the host system via specially crafted URL requests con...

9.9CVSS7.4AI score0.79064EPSS
SaveIn wildExploits4References8Affected Software2
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•29 views

CVE-2018-18815 TIBCO JasperReports Server User Information Disclosure

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability tha...

10CVSS9.5AI score0.03132EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•25 views

CVE-2018-18816 TIBCO JasperReports Persistent Cross Site Scripting Vulnerability

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross si...

8CVSS7.7AI score0.01234EPSS
SaveExploits0References3
CVE
CVE•added 2019/03/07 10:0 p.m.•56 views

CVE-2018-18816

The CVE-2018-18816 entry describes a persistent cross-site scripting (XSS) vulnerability in the repository component of TIBCO JasperReports/Jaspersoft products (Server, Community Edition, ActiveMatrix BPM, and AWS variants). Affected versions include: JasperReports Server up to 6.3.4; 6.4.0–6.4.3...

8CVSS5.8AI score0.01234EPSS
SaveExploits0References3Affected Software1
CVE
CVE•added 2019/03/07 10:0 p.m.•57 views

CVE-2019-8986

The CVE-2019-8986 entry concerns a vulnerability in the SOAP API component of TIBCO JasperReports Server and JasperReports Server for ActiveMatrix BPM. Affected releases include JasperReports Server up to 6.3.4, 6.4.0–6.4.3 and ActiveMatrix BPM variant up to 6.4.3. The issue may allow a malicious...

7.7CVSS7.5AI score0.01039EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2019/03/07 10:0 p.m.•69 views

CVE-2018-18815

CVE-2018-18815 affects the REST API component of TIBCO JasperReports Server and related editions, enabling unauthenticated bypass of authorization for portions of the HTTP interface. Affected releases include JasperReports Server 6.4.0–6.4.3 and 7.1.0, Community Edition up to 7.1.0, ActiveMatrix ...

10CVSS9.6AI score0.03132EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•23 views

CVE-2018-18808 TIBCO JasperReports Server Privilege Escalation Via Race Condition

The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a...

8.8CVSS8.9AI score0.01705EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2019/03/07 10:0 p.m.•34 views

CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

9.9CVSS6.7AI score0.79064EPSS
SaveExploits4References7
Rows per page
Query Builder