CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2017-5533

CVSS 9.3v3.0pub. 2017-11-15upd. 2026-05-13

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

  • Tibco Jasperreports Server

    APP
    Tibco
    6.4.0

  • Tibco Jaspersoft

    APP
    Tibco
    6.4.0

  • Tibco Jaspersoft Reporting And Analytics

    APP
    Tibco
    6.4.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-41561CRITICAL9.1PL ✓same product

RCE w komponencie JNDI Data Sources TIBCO JasperReports Server

CVE-2022-41563CRITICAL9.0PL ✓same product

Stored XSS w komponencie Dashboard TIBCO JasperReports Server

CVE-2021-35495CRITICAL9.0PL ✓same product

TIBCO JasperReports Server — kradzież haseł FTP przez komponent Scheduler Connection

CVE-2020-9409CRITICAL9.8PL ✓same product

Auth Bypass w TIBCO JasperReports Server — nieautoryzowany dostęp superużytkownika

CVE-2018-18815CRITICAL10.0PL ✓same product

Pominięcie autoryzacji w REST API TIBCO JasperReports Server