TIBCO JasperReports persistent cross site scripting
A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 and below.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIBCO JasperReports Server
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.2.3 and below
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.0
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server Community Edition
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server Community Edition
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server Community Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.0 and below
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server for ActiveMatrix BPM
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for ActiveMatrix BPM
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for ActiveMatrix BPM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.0 and below
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Library
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Library
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Library · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.2.3 and below
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.0
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.0
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Library for ActiveMatrix BPM
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Library for ActiveMatrix BPM
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Library for ActiveMatrix BPM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.1 and below
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Jaspersoft for AWS with Multi-Tenancy
Vendor
TIBCO Software Inc.
Product
TIBCO Jaspersoft for AWS with Multi-Tenancy
Platforms
Unknown
Default status
Unknown
TIBCO Jaspersoft for AWS with Multi-Tenancy · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.0 and below
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Jaspersoft Reporting and Analytics for AWS
Vendor
TIBCO Software Inc.
Product
TIBCO Jaspersoft Reporting and Analytics for AWS
Platforms
Unknown
Default status
Unknown
TIBCO Jaspersoft Reporting and Analytics for AWS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.4.0 and below
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Jaspersoft Studio
Vendor
TIBCO Software Inc.
Product
TIBCO Jaspersoft Studio
Platforms
Unknown
Default status
Unknown
TIBCO Jaspersoft Studio · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.2.3 and below
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.0
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.1
affected
Unavailable
Unavailable
Unavailable
None listed
6.3.2
affected
Unavailable
Unavailable
Unavailable
None listed
6.4.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO Jaspersoft Studio for ActiveMatrix BPM
Vendor
TIBCO Software Inc.
Product
TIBCO Jaspersoft Studio for ActiveMatrix BPM
Platforms
Unknown
Default status
Unknown
TIBCO Jaspersoft Studio for ActiveMatrix BPM · Scoped product and version facts