Lucene search
+L

299 matches found

OSV
OSV
added 2024/09/29 4:27 p.m.24 views

RHSA-2012:1537 Red Hat Security Advisory: jasperreports-server-pro security and bug fix update

Bulletin has no description...

5CVSS6.9AI score0.3038EPSS
Exploits2References8
OSV
OSV
added 2024/09/13 8:28 a.m.13 views

RHSA-2014:0389 Red Hat Security Advisory: jasperreports-server-pro security update

Bulletin has no description...

9.8CVSS9.4AI score0.84362EPSS
Exploits5References10
OSV
OSV
added 2024/09/13 8:2 a.m.28 views

RHSA-2014:0037 Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update

Bulletin has no description...

5.8CVSS8.5AI score0.05722EPSS
Exploits1References17
Cvelist
Cvelist
added 2024/07/10 5:2 p.m.23 views

CVE-2024-3325 JasperReports Server Driver upload vulnerability

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

8.6CVSS0.00591EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/10 5:2 p.m.21 views

CVE-2024-3325 JasperReports Server Driver upload vulnerability

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

8.6CVSS7AI score0.00591EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/10 12:0 a.m.6 views

TIBCO Software Jaspersoft JasperReports Server Security Vulnerability

TIBCO Software Jaspersoft JasperReports Server is a report generation tool from TIBCO Software, USA. The product supports PDF, HTML, XLS, CSV and XML file output formats. A security vulnerability exists in TIBCO Software Jaspersoft JasperReports Server versions 8.0.4 through 9.0.0, which stems fr...

8.6CVSS7.1AI score0.00591EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.35 views

RHEL 7 : jasperreports-server-pro (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jackson-databind: Unsafe deserialization due to incomplete black list incomplete fix for CVE-2017-15095...

9.8CVSS8.8AI score0.49727EPSS
Exploits4References6
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.18 views

RHEL 7 : jasperreports (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jasperreports: Information disclosure vulnerability CVE-2017-5529 Note that Nessus has not tested for this issue bu...

8.1AI score0.01329EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/17 6:53 p.m.12 views

CVE-2024-3323 Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, entici...

8.3CVSS7AI score0.00436EPSS
Exploits0References1
CVE
CVE
added 2024/04/17 6:53 p.m.89 views

CVE-2024-3323

CVE-2024-3323 affects TIBCO JasperReports Server versions 8.0.4 and 8.2.0 (UI Request/Response Validation). The issue is a reflected Cross-Site Scripting vulnerability that allows injection of malicious scripts into a trusted app, potentially stealing a user’s active session cookie when a user cl...

8.3CVSS6.9AI score0.00436EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/17 6:53 p.m.25 views

CVE-2024-3323 Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, entici...

8.3CVSS8.4AI score0.00436EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.6 views

TIBCO Software JasperReports Server 安全漏洞

TIBCO Software JasperReports Server is an embeddable reporting server from TIBCO Software, Inc. that provides reporting and analytics capabilities that can be embedded into web or mobile devices. A security vulnerability exists in TIBCO Software JasperReports Server version 8.0.4 and 8.2.0, which...

8.3CVSS6.4AI score0.00436EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/11 12:0 a.m.8 views

PT-2024-25174 · Tibco · Tibco Jasperreports Server

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server affected versions not specified Description: The issue allows code execution to be exploited even without prior access to the system. Recommendations: At the moment, there is no information about a newer version tha...

7.5AI score
Exploits0References1
Tibco
Tibco
added 2024/04/09 8:1 p.m.21 views

TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3327

TIBCO JasperReports Server SQL Injection vulnerability Original release date: April 9, 2023 Last revised: --- CVE-2024-3327 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and below Component Affected Quer...

8.4AI score
Exploits0
Tibco
Tibco
added 2024/04/09 7:55 p.m.38 views

TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3326

TIBCO JasperReports Server Remote Code Execution RCE vulnerability Original release date: April 09, 2024 Last revised: --- CVE-2024-3326 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and below Component...

8.4AI score
Exploits0
Tibco
Tibco
added 2024/04/09 7:26 p.m.16 views

TIBCO Security Advisory: April 9, 2024 - TIBCO JasperReports Server - CVE-2024-3323

TIBCO JasperReports Server Reflected Cross Site Scripting XSS vulnerability Original release date: April 9, 2024 Last revised: --- CVE-2024-3323 Source: TIBCO Software Inc. Products Affected TIBCO JasperReports Server versions 8.0.4 and below TIBCO JasperReports Server versions 8.2.0 and below...

8.3CVSS6.8AI score0.00436EPSS
Exploits0
OSV
OSV
added 2024/03/06 11:0 a.m.32 views

BIT-JASPERREPORTS-2020-9409

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a...

10CVSS9.5AI score0.03375EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:59 a.m.44 views

BIT-JASPERREPORTS-2020-9410

The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that...

8.8CVSS8.9AI score0.05063EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:59 a.m.23 views

BIT-JASPERREPORTS-2021-35494

The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS...

5.7CVSS4.9AI score0.00486EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:58 a.m.31 views

BIT-JASPERREPORTS-2021-35495

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server fo...

9CVSS8.6AI score0.00799EPSS
Exploits0References2
Rows per page
Query Builder