TIBCO JasperReports Server
TIBCO Software Inc.
- Product type
- Other
- Catalog vulnerabilities
- 22
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 22 analyzed records
Verify to analyze this security profile
As of 10/06/2026, within CyStack's analyzed data, TIBCO JasperReports Server has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of TIBCO JasperReports Server and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2022-41561TIBCO JasperReports Server RCE Vulnerability | Exploitation statusNot confirmed | FixYes | Published12/15/2022 | SeverityCritical |
CVE-2022-41562TIBCO JasperReports Server XSS Issue on Roles | Exploitation statusNot confirmed | FixYes | Published12/15/2022 | SeverityHigh |
CVE-2022-41563TIBCO JasperReports Server Stored XSS Vulnerability | Exploitation statusNot confirmed | FixYes | Published12/15/2022 | SeverityCritical |
CVE-2022-22773TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot confirmed | FixYes | Published05/17/2022 | SeverityHigh |
CVE-2022-22771TIBCO JasperReports Library Directory Traversal Vulnerability | Exploitation statusNot confirmed | FixYes | Published03/15/2022 | SeverityCritical |
CVE-2021-35496TIBCO JasperReports XML Eternal Entity (XXE) vulnerability | Exploitation statusNot confirmed | FixYes | Published10/12/2021 | SeverityHigh |
CVE-2021-35495TIBCO JasperReports FTP Password exposed | Exploitation statusNot confirmed | FixYes | Published10/12/2021 | SeverityCritical |
CVE-2021-35494TIBCO JasperReports unauthorized access to temporary object | Exploitation statusNot confirmed | FixYes | Published10/12/2021 | SeverityMedium |
CVE-2020-9410TIBCO JasperReports Library | Exploitation statusNot confirmed | FixYes | Published05/20/2020 | SeverityHigh |
CVE-2020-9409TIBCO JasperReports Server Fails To Enforce Access Restrictions | Exploitation statusNot confirmed | FixYes | Published05/20/2020 | SeverityCritical |
CVE-2018-18815TIBCO JasperReports Server User Information Disclosure | Exploitation statusNot confirmed | FixYes | Published03/07/2019 | SeverityCritical |
CVE-2018-18816TIBCO JasperReports Persistent Cross Site Scripting Vulnerability | Exploitation statusNot confirmed | FixYes | Published03/07/2019 | SeverityHigh |
CVE-2019-8986TIBCO JasperReports Server XML Entity Expansion Vulnerability | Exploitation statusNot confirmed | FixYes | Published03/07/2019 | SeverityHigh |
CVE-2018-18808TIBCO JasperReports Server Privilege Escalation Via Race Condition | Exploitation statusNot confirmed | FixYes | Published03/07/2019 | SeverityHigh |
CVE-2018-18809TIBCO JasperReports Library Directory Traversal Vulnerability | Exploitation statusKEV | FixYes | Published03/07/2019 | SeverityCritical |
CVE-2018-5430TIBCO JasperReports Server Information Disclosure Vulnerability | Exploitation statusKEV | FixYes | Published04/17/2018 | SeverityHigh |
CVE-2018-5431TIBCO JasperReports Server Cross Site Scripting Vulnerability | Exploitation statusNot confirmed | FixYes | Published04/17/2018 | SeverityMedium |
CVE-2018-5429TIBCO JasperReports Library Code Sandboxing Problem | Exploitation statusNot confirmed | FixYes | Published04/17/2018 | SeverityHigh |
CVE-2017-5533TIBCO JasperReports Server credentials disclosure | Exploitation statusNot confirmed | FixNot confirmed | Published11/15/2017 | SeverityCritical |
CVE-2017-5532TIBCO JasperReports persistent cross site scripting | Exploitation statusNot confirmed | FixNot confirmed | Published11/15/2017 | SeverityMedium |
CVE-2017-5528TIBCO JasperReports Server cross-site vulnerabilities | Exploitation statusNot confirmed | FixNot confirmed | Published06/29/2017 | SeverityMedium |
CVE-2017-5529TIBCO JasperReports Library Information Disclosure | Exploitation statusNot confirmed | FixNot confirmed | Published06/29/2017 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
