How many TIBCO jasperreports server CVEs are in CISA KEV?

Yes — 2 of TIBCO jasperreports server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of TIBCO jasperreports server are affected?

46 distinct TIBCO jasperreports server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TIBCO jasperreports server CVEs?

TIBCO jasperreports server's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical TIBCO jasperreports server vulnerabilities are there?

TIBCO jasperreports server has 6 critical and 14 high-severity CVEs.

What is the average severity of TIBCO jasperreports server CVEs?

The average CVSS base score across TIBCO jasperreports server's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TIBCO

24 CVEs

2 in CISA KEV

TIBCO jasperreports server Vulnerabilities

Name: TIBCO jasperreports server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for jasperreports server by TIBCO.

24

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

8.2

Avg CVSS

2017–2024

Last updated July 10, 2024

Overview

TIBCO jasperreports server has 24 published CVE records since 2017, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TIBCO jasperreports server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of TIBCO jasperreports server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High14

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of TIBCO jasperreports server's CVEs are confirmed exploited in the wild.

Public exploits

2

2 of TIBCO jasperreports server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every TIBCO jasperreports server version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

8.0.41 CVE
8.2.01 CVE

Version ranges

6.4.0 <= v <= 6.4.09 CVEs
6.4.2 <= v <= 6.4.27 CVEs
6.3.0 <= v <= 6.3.06 CVEs
<= 6.4.35 CVEs
6.3.2 <= v <= 6.3.24 CVEs
6.4.1 <= v <= 6.4.14 CVEs
6.4.3 <= v <= 6.4.34 CVEs
7.1.0 <= v <= 7.1.04 CVEs
7.5.0 <= v <= 7.5.04 CVEs
7.9.0 <= v <= 7.9.04 CVEs
<= 6.2.43 CVEs
<= 6.3.43 CVEs
<= 6.4.23 CVEs
<= 7.1.03 CVEs
<= 7.2.13 CVEs
<= 7.8.03 CVEs
<= 7.9.03 CVEs
<= 8.0.23 CVEs
<= 8.1.03 CVEs
6.3.3 <= v <= 6.3.33 CVEs
7.5.1 <= v <= 7.5.13 CVEs
7.8.0 <= v <= 7.8.03 CVEs
8.1.0 <= v <= 8.1.03 CVEs
<= 6.1.12 CVEs
<= 7.1.12 CVEs
6.2.0 <= v <= 6.2.02 CVEs
6.2.1 <= v <= 6.2.12 CVEs
< 8.0.21 CVE
<= 6.2.01 CVE
<= 6.2.31 CVE
<= 6.3.01 CVE
<= 6.4.01 CVE
<= 7.5.01 CVE
<= 7.9.21 CVE
6.3.1 <= v <= 6.3.11 CVE
7.2.0 <= v <= 7.2.01 CVE
7.9.1 <= v <= 7.9.11 CVE
8.0 <= v < 8.0.41 CVE
8.0.4 <= v <= 9.0.01 CVE
8.2 <= v < 8.2.01 CVE

Fixed in

> 9.0.01 CVE
8.0.21 CVE
8.0.41 CVE
8.2.01 CVE

Find a version

24 CVEs

Sort

High vulnerability · 2024-07-10
CVE-2024-3325
Patch
CWE-269
High · CVSS 8.6
EPSS 0.6% (45th pct)2024-07-10
High vulnerability · 2024-04-17
CVE-2024-3323
Patch
CWE-79
High · CVSS 8.3
EPSS 0.4% (36th pct)2024-04-17
Critical vulnerability · 2022-12-15
CVE-2022-41563
Patch
Critical · CVSS 9.0
EPSS 0.9% (55th pct)2022-12-15
High vulnerability · 2022-12-15
CVE-2022-41562
Patch
High · CVSS 8.4
EPSS 0.7% (50th pct)2022-12-15
Critical vulnerability · 2022-12-15
CVE-2022-41561
Patch
Critical · CVSS 9.1
EPSS 1.4% (71th pct)2022-12-15
TIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability
CVE-2022-22773
Patch
High · CVSS 7.7
EPSS 0.5% (39th pct)2022-05-17
High vulnerability · 2022-03-15
CVE-2022-22771
Patch
High · CVSS 8.8
EPSS 2.1% (80th pct)2022-03-15
High vulnerability · 2021-10-12
CVE-2021-35496
Patch
High · CVSS 7.5
EPSS 0.6% (46th pct)2021-10-12
Critical vulnerability · 2021-10-12
CVE-2021-35495
Patch
Critical · CVSS 9.0
EPSS 0.8% (53th pct)2021-10-12
Medium vulnerability · 2021-10-12
CVE-2021-35494
Patch
Medium · CVSS 5.7
EPSS 0.5% (39th pct)2021-10-12
High vulnerability · 2020-05-20
CVE-2020-9410
Patch
High · CVSS 8.8
EPSS 5.1% (91th pct)2020-05-20
Critical vulnerability · 2020-05-20
CVE-2020-9409
Patch
Critical · CVSS 9.8
EPSS 3.4% (88th pct)2020-05-20
High vulnerability · 2019-03-07
CVE-2019-8986
Patch
High · CVSS 7.7
EPSS 1.0% (60th pct)2019-03-07
TIBCO JasperReports Persistent Cross Site Scripting Vulnerability
CVE-2018-18816
Patch
High · CVSS 8.0
EPSS 1.2% (66th pct)2019-03-07
Critical vulnerability · 2019-03-07
CVE-2018-18815
Patch
Critical · CVSS 10.0
EPSS 3.1% (87th pct)2019-03-07
TIBCO JasperReports Library Directory Traversal Vulnerability
CVE-2018-18809
CISA KEV
Public exploit
Patch
CWE-22
Added to CISA KEV 2022-12-29
High · CVSS 8.3
EPSS 79.1% (100th pct)2019-03-07
High vulnerability · 2019-03-07
CVE-2018-18808
Patch
High · CVSS 8.8
EPSS 1.7% (75th pct)2019-03-07
TIBCO JasperReports Server Cross Site Scripting Vulnerability
CVE-2018-5431
Patch
Medium · CVSS 6.3
EPSS 0.6% (45th pct)2018-04-17
TIBCO JasperReports Server Information Disclosure Vulnerability
CVE-2018-5430
CISA KEV
Public exploit
Patch
CWE-200
Added to CISA KEV 2022-12-29
High · CVSS 8.3
EPSS 48.8% (99th pct)2018-04-17
High vulnerability · 2018-04-17
CVE-2018-5429
Patch
High · CVSS 8.8
EPSS 1.6% (73th pct)2018-04-17
TIBCO JasperReports Server credentials disclosure
CVE-2017-5533
Patch
Critical · CVSS 9.8
EPSS 2.0% (79th pct)2017-11-15
TIBCO JasperReports persistent cross site scripting
CVE-2017-5532
Patch
Medium · CVSS 5.4
EPSS 0.7% (49th pct)2017-11-15
Medium vulnerability · 2017-06-29
CVE-2017-5529
Patch
Medium · CVSS 6.5
EPSS 1.3% (68th pct)2017-06-29
High vulnerability · 2017-06-29
CVE-2017-5528
Patch
High · CVSS 8.8
EPSS 0.6% (44th pct)2017-06-29

Common weakness types

The CWE weakness categories most often found in TIBCO jasperreports server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TIBCO jasperreports server CVEs were published each year.

2017

4

2018

3

2019

5

2020

2

2021

3

2022

5

2024

2

Other TIBCO products

Browse vulnerabilities for other products by TIBCO.

spotfire server29 CVEs TIBCO JasperReports Server22 CVEs TIBCO Spotfire Analytics Platform for AWS Marketplace22 CVEs spotfire analytics platform for aws21 CVEs TIBCO JasperReports Server for ActiveMatrix BPM19 CVEs TIBCO Spotfire Server17 CVEs rendezvous16 CVEs spotfire analyst13 CVEs

All TIBCO vulnerabilities

Frequently asked questions

Common questions about TIBCO jasperreports server vulnerabilities.

How many CVEs does TIBCO jasperreports server have?: TIBCO jasperreports server has 24 published CVE records since 2017.
How many TIBCO jasperreports server CVEs are in CISA KEV?: Yes — 2 of TIBCO jasperreports server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for TIBCO jasperreports server vulnerabilities?: Yes — 2 of TIBCO jasperreports server's CVEs have a known public exploit.
Which versions of TIBCO jasperreports server are affected?: 46 distinct TIBCO jasperreports server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TIBCO jasperreports server CVEs?: TIBCO jasperreports server's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical TIBCO jasperreports server vulnerabilities are there?: TIBCO jasperreports server has 6 critical and 14 high-severity CVEs.
What is the average severity of TIBCO jasperreports server CVEs?: The average CVSS base score across TIBCO jasperreports server's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TIBCO jasperreports server vulnerabilities

Monitor new TIBCO jasperreports server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing