TIBCO JasperReports Persistent Cross Site Scripting Vulnerability
CVE-2018-18816

8HIGH

Key Information:

Vendor: Tibco
Status: Tibco Jasperreports Server; Tibco Jasperreports Server Community Edition; Tibco Jasperreports Server For Activematrix Bpm; Tibco Jaspersoft For Aws With Multi-tenancy
Vendor: CVE Published:; 7 March 2019

Summary

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.