Product by Tibco Software Inc.
Tibco Jasperreports Server For Activematrix Bpm
19 known vulnerabilities in Tibco Jasperreports Server For Activematrix Bpm (Tibco Software Inc.), 2 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability In CISA KEValso in 11 other products | 9.9 | |
| Critical | CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability In CISA KEValso in 7 other products | 7.7 | |
| Critical | CVE-2020-9409 | TIBCO JasperReports Server Fails To Enforce Access Restrictions | 9.8 | |
| Critical | CVE-2018-18815 | TIBCO JasperReports Server User Information Disclosure | 10.0 | |
| Critical | CVE-2022-22771 | TIBCO JasperReports Library Directory Traversal Vulnerability | 9.9 | |
| High | CVE-2020-9410 | TIBCO JasperReports Library | 7.3 | |
| Critical | CVE-2017-5533 | TIBCO JasperReports Server credentials disclosure | 9.3 | |
| High | CVE-2018-18808 | TIBCO JasperReports Server Privilege Escalation Via Race Condition | 8.8 | |
| High | CVE-2018-5429 | TIBCO JasperReports Library Code Sandboxing Problem | 8.8 | |
| High | CVE-2018-18816 | TIBCO JasperReports Persistent Cross Site Scripting Vulnerability | 8.0 | |
| Critical | CVE-2021-35495 | TIBCO JasperReports FTP Password exposed | 9.0 | |
| High | CVE-2019-8986 | TIBCO JasperReports Server XML Entity Expansion Vulnerability | 7.7 | |
| Medium | CVE-2017-5529 | TIBCO JasperReports Library Information Disclosure | 4.1 | |
| High | CVE-2021-35496 | TIBCO JasperReports XML Eternal Entity (XXE) vulnerability | 7.5 | |
| High | CVE-2022-22773 | TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability | 7.7 | |
| Medium | CVE-2018-5431 | TIBCO JasperReports Server Cross Site Scripting Vulnerability | 6.3 | |
| Medium | CVE-2017-5532 | TIBCO JasperReports persistent cross site scripting | 5.4 | |
| High | CVE-2017-5528 | TIBCO JasperReports Server cross-site vulnerabilities | 5.7 | |
| Medium | CVE-2021-35494 | TIBCO JasperReports unauthorized access to temporary object | 5.7 |