TIBCO JasperReports Library vulnerabilities

5 CVEs affecting TIBCO JasperReports Library, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22771, published 2022-03-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-18809: TIBCO JasperReports Library Directory Traversal Vulnerability, published 2019-03-07. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2022-12-29. EPSS: 79.1% chance of exploitation in the next 30 days. The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO…
CVE-2020-9410, published 2020-05-20. High severity, CVSS 8.8. EPSS: 5.4% chance of exploitation in the next 30 days. The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS…
CVE-2022-22771, published 2022-03-15. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS…
CVE-2018-5429, published 2018-04-17. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM,…
CVE-2017-5532, published 2017-11-15. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports…