CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2017-5533

CVSS 9.3v3.0pub. 2017-11-15upd. 2026-05-13

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

  • Tibco Jasperreports Server

    APP
    Tibco
    6.4.0

  • Tibco Jaspersoft

    APP
    Tibco
    6.4.0

  • Tibco Jaspersoft Reporting And Analytics

    APP
    Tibco
    6.4.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-41561CRITICAL9.1ten sam produkt

The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serve...

CVE-2022-41563CRITICAL9.0ten sam produkt

The Dashboard component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO...

CVE-2021-35495CRITICAL9.0ten sam produkt

The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Se...

CVE-2020-9409CRITICAL9.8ten sam produkt

The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Serve...

CVE-2018-18815CRITICAL10.0ten sam produkt

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Communi...