The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperReports Server - Developer Edition, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for Microsoft Azure, and TIBCO JasperReports Server for Microsoft Azure contains an easily exploitable vulnerability that allows a privileged/administrative attacker with network access to execute Remote Code Execution to obtain a reverse shell on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 8.0.2 and below, TIBCO JasperReports Server: version 8.1.0, TIBCO JasperReports Server - Community Edition: versions 8.1.0 and below, TIBCO JasperReports Server - Developer Edition: versions 8.1.0 and below, TIBCO JasperReports Server for AWS Marketplace: versions 8.0.2 and below, TIBCO JasperReports Server for AWS Marketplace: version 8.1.0, TIBCO JasperReports Server for Microsoft Azure: versions 8.0.2 and below, and TIBCO JasperReports Server for Microsoft Azure: version 8.1.0.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIBCO JasperReports Server
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
8.0.2
None listed
TIBCO JasperReports Server
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server - Community Edition
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server - Community Edition
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server - Community Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
8.1.0
None listed
TIBCO JasperReports Server - Developer Edition
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server - Developer Edition
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server - Developer Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
8.1.0
None listed
TIBCO JasperReports Server for AWS Marketplace
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for AWS Marketplace
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for AWS Marketplace · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
8.0.2
None listed
TIBCO JasperReports Server for AWS Marketplace
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for AWS Marketplace
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for AWS Marketplace · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
TIBCO JasperReports Server for Microsoft Azure
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for Microsoft Azure
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for Microsoft Azure · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
8.0.2
None listed
TIBCO JasperReports Server for Microsoft Azure
Vendor
TIBCO Software Inc.
Product
TIBCO JasperReports Server for Microsoft Azure
Platforms
Unknown
Default status
Unknown
TIBCO JasperReports Server for Microsoft Azure · Scoped product and version facts