CVE-2019-8986

ALTO 7.7CVE-2019-8986 · Published 07/03/2019 · updated 17/06/2026

In breve

CVE-2019-8986 è una vulnerabilità ALTO (CVSS 7.7) che riguarda jasperreports server (tibco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 64.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
jasperreports server tibco	`= 6.4.0= 6.4.1= 6.4.2= 6.4.3≤ 6.3.4≤ 6.4.3`	No fix yet

Description

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.

References

tibco.com/services/support/advisories · Vendor Advisory
tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-8986 · Vendor Advisory

Altre vulnerabilità di jasperreports server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jasperreports server

tibco

= 6.4.0= 6.4.1= 6.4.2= 6.4.3≤ 6.3.4≤ 6.4.3

No fix yet

Description

Altre vulnerabilità di jasperreports server

Vedi tutto →