CVE-2018-18809

TIBCO JasperReports Library and related JasperReports Server components are affected by a directory traversal vulnerability (CVE-2018-18809) in their default server implementations. The issue could allow web server users to access contents of the host system via specially crafted URL requests con...

CVE-2022-22771

CVE-2022-22771 is a directory-traversal vulnerability in the Server components of TIBCO JasperReports products (Library and JasperReports Server families across multiple deployment options). Affected versions include Library 7.9.0 and 7.9.0 for ActiveMatrix BPM; JasperReports Server 7.9.0 and 7.9...

CVE-2017-5532

The CVE-2017-5532 entry concerns a persistent XSS vulnerability in the report renderer component across multiple TIBCO/Jaspersoft products (JasperReports Server and related editions, JasperReports Library, AWS variants, Studio, and related ActiveMatrix BPM variants). Affected releases include Jas...

CVE-2018-5429

CVE-2018-5429 affects multiple TIBCO JasperReports products (Server, Library, Studio and related editions) where the report scripting component may allow analytic reports with scripting to execute arbitrary code. The vulnerability is due to a flaw in the report scripting component and impacts a w...

CVE-2020-9410

The CVE-2020-9410 issue affects TIBCO JasperReports components (Library, ActiveMatrix BPM variants, Server variants) and is caused by insufficient input validation leading to HTML injection in the report output. This can let a remote attacker who views a maliciously crafted report execute scripts...