4
CVSSv2

CVE-2017-5529

Published: 29/06/2017 Updated: 17/10/2018
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tibco jasperreports library community edition

tibco jasperreports library for activematrix bpm

tibco jasperreports professional 6.3.0

tibco jasperreports professional

tibco jasperreports server 6.2.0

tibco jasperreports server 6.2.1

tibco jasperreports server 6.3.0

tibco jasperreports server

tibco jasperreports server community edition

tibco jasperreports server for activematrix bpm

tibco jaspersoft for aws with multi-tenancy

tibco jaspersoft reporting and analytics for aws

tibco jaspersoft studio for activematrix bpm

Vendor Advisories

Debian Bug report logs - #884131 jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532 Package: libjasperreports-java; Maintainer for libjasperreports-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for libjasperreports-java is src:jasperreports (PTS, buildd, popcon) Reported by: ...
Debian Bug report logs - #880467 jasperreports: CVE-2017-14941, CVE-2017-5528, CVE-2017-5529 Package: jasperreports; Maintainer for jasperreports is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Markus Koschany <apo@debianorg> Date: Tue, 31 Oct 2017 21:48:02 UTC Severity: impor ...
JasperReports library components contain an information disclosure vulnerability This vulnerability includes the theoretical disclosure of any accessible information from the host file system Affects TIBCO JasperReports Library Community Edition (versions 640 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 620 and below ...