VYPR
← All advisories
Medium severity4.1NVD Advisory· Published Jun 29, 2017· Updated Jun 17, 2026

CVE-2017-5529

CVE-2017-5529

Description

JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below).

Affected products

31
  • TIBCO Software/Jasperreports Library5 versions
    cpe:2.3:a:tibco:jasperreports_library_community_edition:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:tibco:jasperreports_library_community_edition:*:*:*:*:*:*:*:*range: <=6.4.0
    • cpe:2.3:a:tibco:jasperreports_library_for_activematrix_bpm:*:*:*:*:*:*:*:*range: <=6.2.0
    • (no CPE)range: <=6.4.0
    • (no CPE)range: 6.4.0
    • (no CPE)range: unspecified
  • TIBCO Software/Jasperreports Professional4 versions
    cpe:2.3:a:tibco:jasperreports_professional:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:tibco:jasperreports_professional:*:*:*:*:*:*:*:*range: <=6.2.1
    • cpe:2.3:a:tibco:jasperreports_professional:6.3.0:*:*:*:*:*:*:*
    • (no CPE)range: <=6.3.0
    • (no CPE)range: unspecified
  • TIBCO Software/Jasperreports Server8 versions
    cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*range: <=6.1.1
    • cpe:2.3:a:tibco:jasperreports_server:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server:6.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server_community_edition:*:*:*:*:*:*:*:*range: <=6.3.0
    • (no CPE)range: <=6.3.0
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
  • TIBCO Software/Jasperreports Server For Activematrix Bpm3 versions
    cpe:2.3:a:tibco:jasperreports_server_for_activematrix_bpm:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:jasperreports_server_for_activematrix_bpm:*:*:*:*:*:*:*:*range: <=6.2.0
    • (no CPE)range: <=6.2.0
    • (no CPE)range: unspecified
  • TIBCO Software/Jaspersoft For AWS With Multi Tenancy3 versions
    cpe:2.3:a:tibco:jaspersoft_for_aws_with_multi-tenancy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:jaspersoft_for_aws_with_multi-tenancy:*:*:*:*:*:*:*:*range: <=6.3.0
    • (no CPE)range: <=6.3.0
    • (no CPE)range: unspecified
  • TIBCO Software/Jaspersoft Reporting And Analytics For AWS3 versions
    cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics_for_aws:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:jaspersoft_reporting_and_analytics_for_aws:*:*:*:*:*:*:*:*range: <=6.3.0
    • (no CPE)range: <=6.3.0
    • (no CPE)range: unspecified
  • TIBCO Software/Jaspersoft Studio For Activematrix Bpm3 versions
    cpe:2.3:a:tibco:jaspersoft_studio_for_activematrix_bpm:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tibco:jaspersoft_studio_for_activematrix_bpm:*:*:*:*:*:*:*:*range: <=6.2.0
    • (no CPE)range: <=6.2.0
    • (no CPE)range: unspecified
  • TIBCO Software/JasperReports Library for ActiveMatrix BPMllm-create
    Range: <=6.2.0
  • TIBCO Software/TIBCO JasperReports Server Community Editionllm-fuzzy
    Range: <=6.3.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.