NVD

Id
88002  
Name
CVE-2017-5529  
Description
JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below).  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-05  
Seq
2017-5529  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422038 88002 CVE-2017-8356 https://github.com/ImageMagick/ImageMagick/issues/449  View
422039 88002 CVE-2017-8356 https://github.com/ImageMagick/ImageMagick/issues/449  View
430338 88002 CVE-2017-0576 1038201  View
430339 88002 CVE-2017-0576 1038201  View

Related JVN