CVE-2022-22771
TIBCO JasperReports Library Directory Traversal Vulnerability
- State
- Published
- Severity
- 9.9 Critical
- Published
- Mar 15, 2022
- Updated
- Sep 17, 2024
- Reserved
- Jan 7, 2022
Description
The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, TIBCO JasperReports Server for ActiveMatrix BPM, and TIBCO JasperReports Server for Microsoft Azure contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: version 7.9.0, TIBCO JasperReports Library for ActiveMatrix BPM: version 7.9.0, TIBCO JasperReports Server: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for AWS Marketplace: versions 7.9.0 and 7.9.1, TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.9.0 and 7.9.1, and TIBCO JasperReports Server for Microsoft Azure: version 7.9.1.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 9.9 Critical | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | tibco |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
TIBCO JasperReports LibraryTIBCO Software Inc. |
|
TIBCO JasperReports Library for ActiveMatrix BPMTIBCO Software Inc. |
|
TIBCO JasperReports ServerTIBCO Software Inc. |
|
TIBCO JasperReports Server for AWS MarketplaceTIBCO Software Inc. |
|
TIBCO JasperReports Server for ActiveMatrix BPMTIBCO Software Inc. |
|
TIBCO JasperReports Server for Microsoft AzureTIBCO Software Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.