Published: 29/06/2017 Updated: 09/09/2021

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, and 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.2.0 and below), and TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.2.0 and below).

Vulnerable Product	Search on Vulmon	Subscribe to Product
tibco jasperreports server
tibco jasperreports server 6.2.0
tibco jasperreports server 6.2.1
tibco jasperreports server 6.3.0
tibco jaspersoft
tibco jaspersoft reporting and analytics

Debian Bug report logs - #884131 jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532 Package: libjasperreports-java; Maintainer for libjasperreports-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for libjasperreports-java is src:jasperreports (PTS, buildd, popcon) Reported by: ...

Debian Bug report logs - #880467 jasperreports: CVE-2017-14941, CVE-2017-5528, CVE-2017-5529 Package: jasperreports; Maintainer for jasperreports is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Markus Koschany <apo@debianorg> Date: Tue, 31 Oct 2017 21:48:02 UTC Severity: impor ...

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks The impact of this vulnerability includes the theoretical disclosure of sensitive information Affects TIBCO JasperReports Server (versions 611 and below, 620, 6 ...

CWE-352 https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884131 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-5528

CVE-2017-5528

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect