CVE-2019-8986

ALTO 7.7CVE-2019-8986 · Published 07/03/2019 · updated 17/06/2026

En resumen

CVE-2019-8986 es una vulnerabilidad ALTO (CVSS 7.7) que afecta a jasperreports server (tibco).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 64.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
jasperreports server tibco	`= 6.4.0= 6.4.1= 6.4.2= 6.4.3≤ 6.3.4≤ 6.4.3`	No fix yet

Description

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.

References

tibco.com/services/support/advisories · Vendor Advisory
tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-8986 · Vendor Advisory

Más vulnerabilidades de jasperreports server

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jasperreports server

tibco

= 6.4.0= 6.4.1= 6.4.2= 6.4.3≤ 6.3.4≤ 6.4.3

No fix yet

Description

Más vulnerabilidades de jasperreports server

Ver todo →