CVE-2017-14941: Jaspersoft JasperReports

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.

Affected products

• Jaspersoft JasperReports: version 4.7.0 only

Published 2017-10-02. Last modified 2026-06-17.