CVE-2019-8986
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
TIBCO JasperReports Server XML Entity Expansion Vulnerability
The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIBCO JasperReports Server
- Vendor
- TIBCO Software Inc.
- Product
- TIBCO JasperReports Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | Unavailable | 6.3.4 | None listed |
| 6.4.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.4.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.4.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
TIBCO JasperReports Server for ActiveMatrix BPM
- Vendor
- TIBCO Software Inc.
- Product
- TIBCO JasperReports Server for ActiveMatrix BPM
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | Unavailable | 6.4.3 | None listed |