The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: version 7.9.0, TIBCO JasperReports Library for ActiveMatrix BPM: version 7.9.0, TIBCO JasperReports Server: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and 7.9.1, and TIBCO JasperReports Server for Microsoft Azure: version 7.9.1.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIBCO JasperReports Library
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Library
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Library · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.9.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Library for ActiveMatrix BPM
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Library for ActiveMatrix BPM
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Library for ActiveMatrix BPM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.9.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.9.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.9.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server for AWS Marketplace
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for AWS Marketplace
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for AWS Marketplace · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.9.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.9.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server for ActiveMatrix BPM
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for ActiveMatrix BPM
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for ActiveMatrix BPM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.9.0
affected
Unavailable
Unavailable
Unavailable
None listed
7.9.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server for Microsoft Azure
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for Microsoft Azure
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for Microsoft Azure · Scoped product and version facts