VYPR
← All advisories
High severity7.7NVD Advisory· Published Mar 7, 2019· Updated Jun 17, 2026

CVE-2019-8986

CVE-2019-8986

Description

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.

Affected products

10
  • TIBCO Software/Jasperreports Server8 versions
    cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:*:*:*range: <=6.3.4
    • cpe:2.3:a:tibco:jasperreports_server:*:*:*:*:*:activematrix_bpm:*:*range: <=6.4.3
    • cpe:2.3:a:tibco:jasperreports_server:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server:6.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tibco:jasperreports_server:6.4.3:*:*:*:*:*:*:*
    • (no CPE)range: <=6.3.4, 6.4.0, 6.4.1, 6.4.2, 6.4.3
    • (no CPE)range: unspecified
  • TIBCO Software/Jasperreports Server For Activematrix Bpmllm-fuzzy2 versions
    <=6.4.3+ 1 more
    • (no CPE)range: <=6.4.3
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.