CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

310 matches found

Cvelist•added 2022/12/15 3:44 a.m.•41 views

CVE-2022-41561 TIBCO JasperReports Server RCE Vulnerability

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

9.1CVSS9.7AI score0.01444EPSS

SaveExploits0References2

Cvelist•added 2022/12/15 3:44 a.m.•43 views

CVE-2022-41563 TIBCO JasperReports Server Stored XSS Vulnerability

The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure,...

9CVSS8.5AI score0.00873EPSS

SaveExploits0References2

CVE•added 2022/12/15 3:44 a.m.•90 views

CVE-2022-41561

The CVE-2022-41561 issue affects the JNDI Data Sources component of TIBCO JasperReports Server and related editions, allowing a privileged attacker with network access to achieve Remote Code Execution and obtain a reverse shell on the affected system. Affected products/versions include JasperRepo...

9.1CVSS7.8AI score0.01444EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/12/15 3:44 a.m.•88 views

CVE-2022-41562

CVE-2022-41562 affects TIBCO JasperReports Server family (Server, Community, Developer, AWS Marketplace, Microsoft Azure, and related editions). The HTML escaping component is vulnerable to cross-site scripting (XSS) by a privileged/administrative attacker with network access; attack requires use...

8.4CVSS8AI score0.00718EPSS

SaveExploits0References2Affected Software1

NVD•added 2022/12/13 7:15 p.m.•27 views

CVE-2022-41562

The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS...

8.4CVSS0.00718EPSS

SaveExploits0References2

NVD•added 2022/12/13 7:15 p.m.•23 views

CVE-2022-41563

9CVSS0.00873EPSS

SaveExploits0References2

NVD•added 2022/12/13 7:15 p.m.•24 views

CVE-2022-41561

9.1CVSS0.01444EPSS

SaveExploits0References2

Prion•added 2022/12/13 7:15 p.m.•27 views

Cross site scripting

4.9CVSS5.2AI score0.00873EPSS

SaveExploits0References2Affected Software1

UbuntuCve•added 2022/12/13 7:15 p.m.•30 views

CVE-2022-41561

9.1CVSS7.2AI score0.01444EPSS

SaveExploits0References3

UbuntuCve•added 2022/12/13 7:15 p.m.•30 views

CVE-2022-41562

8.4CVSS7.3AI score0.00718EPSS

SaveExploits0References3

Prion•added 2022/12/13 7:15 p.m.•31 views

Design/Logic Flaw

5.4CVSS7.9AI score0.00718EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/12/12 1:49 a.m.•76 views

CVE-2022-41560

The CVE-2022-41560 issue affects TIBCO Nimbus 10.5.0, specifically the Statement Set Upload via the Web Client. The vulnerability allows a low-privileged attacker with network access to cause a Denial of Service (hang/crash). The advisory indicates remediation by upgrading to Nimbus 10.5.1 or lat...

6.5CVSS6.5AI score0.00605EPSS

SaveExploits0References1Affected Software1

NVD•added 2022/12/06 7:15 p.m.•21 views

CVE-2022-41559

The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to exploit an open redirect on the affected system. A successful attack using this vulnerability requires human interaction from ...

9.3CVSS0.00657EPSS

SaveExploits0References1

Prion•added 2022/12/06 7:15 p.m.•22 views

Design/Logic Flaw

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software...

4CVSS6.4AI score0.00605EPSS

SaveExploits0References1Affected Software1

Prion•added 2022/12/06 7:15 p.m.•19 views

Open redirect

5.8CVSS8.8AI score0.00657EPSS

SaveExploits0References1Affected Software1

Prion•added 2022/11/15 7:15 p.m.•26 views

Cross site scripting

The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop, TIBCO Spotfire Server, TIBCO Spotfire Server...

4.9CVSS5.2AI score0.00513EPSS

SaveExploits0References2Affected Software4

NVD•added 2022/09/21 6:15 p.m.•30 views

CVE-2022-30578

The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using this vulnerability requires human...

9CVSS0.00892EPSS

SaveExploits0References3

NVD•added 2022/09/21 6:15 p.m.•23 views

CVE-2022-30577

The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using this vulnerability requires human...

9CVSS0.00753EPSS

SaveExploits0References2

Prion•added 2022/09/21 6:15 p.m.•25 views

Cross site scripting

6CVSS8AI score0.00892EPSS

SaveExploits0References3Affected Software1

Prion•added 2022/09/21 6:15 p.m.•21 views

Cross site scripting

6CVSS8AI score0.00753EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by