Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-5532

Опубликовано: 15 нояб. 2017
Источник: nvd
CVSS3: 5.4
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*
Версия до 6.2.3 (включая)
cpe:2.3:a:tibco:jasperreports_server:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_server:6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_server:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:tibco:jasperreports_server:*:*:community:*:*:*:*:*
Версия до 6.4.0 (включая)
Конфигурация 3
cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:activematrix_bpm:*:*
Версия до 6.4.0 (включая)
Конфигурация 4

Одно из

cpe:2.3:a:tibco:jasperreports_library:*:*:*:*:*:*:*:*
Версия до 6.2.3 (включая)
cpe:2.3:a:tibco:jasperreports_library:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_library:6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_library:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_library:6.4.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jasperreports_library:6.4.1:*:*:*:*:*:*:*
Конфигурация 5
cpe:2.3:a:tibco:jasperreports_library:*:*:*:*:*:activematrix_bpm:*:*
Версия до 6.4.1 (включая)
Конфигурация 6
cpe:2.3:a:tibco:jaspersoft:*:*:*:*:*:aws_with_multi-tenancy:*:*
Версия до 6.4.0 (включая)
Конфигурация 7
cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics:*:*:*:*:*:aws:*:*
Версия до 6.4.0 (включая)
Конфигурация 8

Одно из

cpe:2.3:a:tibco:jaspersoft_studio:*:*:*:*:*:*:*:*
Версия до 6.2.3 (включая)
cpe:2.3:a:tibco:jaspersoft_studio:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jaspersoft_studio:6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jaspersoft_studio:6.3.2:*:*:*:*:*:*:*
cpe:2.3:a:tibco:jaspersoft_studio:6.4.0:*:*:*:*:*:*:*
Конфигурация 9
cpe:2.3:a:tibco:jaspersoft_studio:*:*:*:*:*:activematrix_bpm:*:*
Версия до 6.4.0 (включая)

EPSS

Процентиль: 50%
0.00267
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2017-5532

CVSS3: 5.4
ubuntu
около 8 лет назад

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS ...

debian логотип

CVE-2017-5532

CVSS3: 5.4
debian
около 8 лет назад

A vulnerability in the report renderer component of TIBCO JasperReport ...

github логотип

GHSA-cwm8-8754-76qc

CVSS3: 5.4
github
больше 3 лет назад

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS ...

EPSS

Процентиль: 50%
0.00267
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79