What’s Vulnerable › Products

TIBCO JasperReports Server vulnerabilities

23 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your TIBCO JasperReports Server version is affected

Exploited TIBCO JasperReports Server vulnerabilities

• CVE-2018-5430 — TIBCO JasperReports Server Information Disclosure Vulnerability
• CVE-2018-18809 — TIBCO JasperReports Library Directory Traversal Vulnerability

Latest TIBCO JasperReports Server vulnerabilities

• CVE-2024-3323 — Reflected Cross Site Scripting (XSS) vulnerability (CVSS 8.3)
• CVE-2022-41563 — TIBCO JasperReports Server Stored XSS Vulnerability (CVSS 5.4)
• CVE-2022-41562 — TIBCO JasperReports Server XSS Issue on Roles (CVSS 8.4)
• CVE-2022-41561 — TIBCO JasperReports Server RCE Vulnerability (CVSS 7.2)
• CVE-2022-22773 — TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2022-22771 — TIBCO JasperReports Library Directory Traversal Vulnerability (CVSS 8.8)
• CVE-2021-35496 — TIBCO JasperReports XML Eternal Entity (XXE) vulnerability (CVSS 7.5)
• CVE-2021-35495 — TIBCO JasperReports FTP Password exposed (CVSS 8.8)
• CVE-2021-35494 — TIBCO JasperReports unauthorized access to temporary object (CVSS 5.3)
• CVE-2020-9410 — TIBCO JasperReports Library (CVSS 8.8)
• CVE-2020-9409 — TIBCO JasperReports Server Fails To Enforce Access Restrictions (CVSS 9.8)
• CVE-2019-8986 — TIBCO JasperReports Server XML Entity Expansion Vulnerability (CVSS 7.7)
• CVE-2018-18816 — TIBCO JasperReports Persistent Cross Site Scripting Vulnerability (CVSS 5.4)
• CVE-2018-18815 — TIBCO JasperReports Server User Information Disclosure (CVSS 9.8)
• CVE-2018-18809 — TIBCO JasperReports Library Directory Traversal Vulnerability (CVSS 6.5) — exploited
• CVE-2018-18808 — TIBCO JasperReports Server Privilege Escalation Via Race Condition (CVSS 7.5)
• CVE-2018-5431 — TIBCO JasperReports Server Cross Site Scripting Vulnerability (CVSS 5.4)
• CVE-2018-5430 — TIBCO JasperReports Server Information Disclosure Vulnerability (CVSS 8.8) — exploited
• CVE-2018-5429 — TIBCO JasperReports Library Code Sandboxing Problem (CVSS 8.8)
• CVE-2017-5533 — TIBCO JasperReports Server credentials disclosure (CVSS 9.8)
• CVE-2017-5532 — TIBCO JasperReports persistent cross site scripting (CVSS 5.4)
• CVE-2017-5529 — TIBCO JasperReports Library Information Disclosure (CVSS 6.5)
• CVE-2017-5528 — TIBCO JasperReports Server cross-site vulnerabilities (CVSS 8.8)