Known vulnerabilities in TIBCO JasperReports Server for AWS Marketplace

Known vulnerabilities in TIBCO JasperReports Server for AWS Marketplace

Vendor: TIBCO

Software: TIBCO JasperReports Server for AWS Marketplace

Software CPE: cpe:2.3:a:tibco:tibco_jasperreports_server_for_aws_marketplace:*:*:*:*:*:*:*:*

Website: https://www.tibco.com/

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU70352 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-41563	CWE-79	Low	No	No	8.0.3, 8.1.1	15.12.2022	SB2022121503
#VU70351 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-41562	CWE-79	Low	No	No	8.0.3, 8.1.1	15.12.2022	SB2022121503
#VU70350 - Improper Control of Generation of Code ('Code Injection') CVE-2022-41561	CWE-94	Low	No	No	8.0.3, 8.1.1	15.12.2022	SB2022121503
#VU63354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-22773	CWE-79	Low	No	No	8.0.2	18.05.2022	SB2022051803
#VU61397 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-22771	CWE-22	Medium	No	No	7.9.2	16.03.2022	SB2022031604
#VU57327 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-35496	CWE-611	Medium	No	No	7.9.1	13.10.2021	SB2021101309
#VU57326 - Improper Access Control CVE-2021-35495	CWE-284	Medium	No	No	7.9.1	13.10.2021	SB2021101309
#VU57325 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-35494	CWE-362	Medium	No	No	7.9.1	13.10.2021	SB2021101309
#VU28112 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-9410	CWE-79	Low	No	No	7.5.1	20.05.2020	SB2020052012 SB2020103042
#VU28111 - Improper Access Control CVE-2020-9409	CWE-284	High	No	No	7.2.0	20.05.2020	SB2020052011