NVD

Id
88001  
Name
CVE-2017-5528  
Description
Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, and 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.2.0 and below), and TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.2.0 and below).  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-05  
Seq
2017-5528  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422036 88001 CVE-2017-8355 https://github.com/ImageMagick/ImageMagick/issues/450  View
422037 88001 CVE-2017-8355 https://github.com/ImageMagick/ImageMagick/issues/450  View
430336 88001 CVE-2017-0575 1038201  View
430337 88001 CVE-2017-0575 1038201  View

Related JVN