CVE-2018-18816
The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
| Software | From | Fixed in |
|---|---|---|
| tibco / jasperreports_server | 6.4.0 | 6.4.0.x |
| tibco / jasperreports_server | 6.4.2 | 6.4.2.x |
| tibco / jasperreports_server | - | 7.1.0.x |
| tibco / jasperreports_server | - | 6.4.3.x |
| tibco / jasperreports_server | 6.4.1 | 6.4.1.x |
| tibco / jasperreports_server | 6.4.3 | 6.4.3.x |
| tibco / jasperreports_server | 7.1.0 | 7.1.0.x |
| tibco / jasperreports_server | - | 6.3.4.x |
| tibco / jaspersoft_reporting_and_analytics | - | 7.1.0.x |
| tibco / jaspersoft | - | 7.1.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime