UBUNTU-CVE-2024-3325

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

CVE-2024-3325

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

CVE-2024-3325 JasperReports Server Driver upload vulnerability

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

CVE-2024-3325

Jaspersoft JasperReports Server CVE-2024-3325 affects version 8.0.4 through 9.0.0. Root cause: a JDBC driver upload feature is not properly guarded by configuration, leaving the server susceptible if the administrator does not enable the safety control. The vulnerability description in the connec...

CVE-2024-3325: Improper Privilege Management

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0...

PT-2024-25168

Name of the Vulnerable Software and Affected Versions Jaspersoft JasperReport Servers versions 8.0.4 through 9.0.0 Description The issue affects Jaspersoft JasperReport Servers, causing a vulnerability. No information is provided about the estimated number of potentially affected devices worldwid...

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

Design/Logic Flaw

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

PT-2023-26110 · Jaspersoft · Jaspersoft Clarity Ppm

Name of the Vulnerable Software and Affected Versions: Jaspersoft Clarity PPM version 14.3.0.298 Description: The issue is related to an arbitrary file upload vulnerability via the Profile Picture Upload function. This allows for potential malicious file uploads. Recommendations: For Jaspersoft...

CVE-2023-37790: Improper Neutralization of Input During Web Page Generation

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

CVE-2023-37790

CVE-2023-37790 affects Jaspersoft Clarity PPM 14.3.0.298. Affected component: Profile Picture Upload; vulnerability is an arbitrary file upload vulnerability. No exploitation details are provided in the initial/connected docs. A remediation note from PT-Security recommends disabling the Profile P...

CVE-2023-37790

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function...

Clarity PPM 14.3.0.298 Cross Site Scripting

================================================================================================================================== Title : Insufficient input validation , in CA PPM 14.3 allows remote attackers to execute stored cross-site scripting attacks. | Author : Kaizen | Tested on : windows...

Weak password vulnerability in TIBCO jaspersoft

TIBCO jaspersoft is a desktop report designer. A weak password vulnerability exists in TIBCO jaspersoft, which can be exploited by an attacker to obtain sensitive information...

TIBCO JasperSoft Path Traversal

Path traversal vulnerability in TIBCO JasperSoft resource parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Tibco JasperSoft Path Traversal Vulnerability

Exploit for multiple platform in category web applications Title: CVE-2018-18809 Path traversal in Tibco JasperSoft Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: Tibco JasperSoft https://www.jaspersoft.com/ Vulnerability: Path traversal CVE: CVE-2018-18809 Path traversal...

Tibco JasperSoft Path Traversal

Title: CVE-2018-18809 Path traversal in Tibco JasperSoft Credit: Elar Lang / https://security.elarlang.eu Vendor/Product: Tibco JasperSoft https://www.jaspersoft.com/ Vulnerability: Path traversal CVE: CVE-2018-18809 Path traversal Vulnerability is in reportresource/reportresource/ service and in...

Jaspersoft JasperReports Server DiagnosticDataCipherer Hard-coded Cryptographic Key Information Disclosure Vulnerability

This vulnerability allows the decryption of the passwords on vulnerable installations of Jaspersoft JasperReports Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within encryption of user passwords in the DiagnosticDataCipherer class. A hard-coded...