Home / Vulnerabilities / CVE-2018-5430
HIGH SEVERITY
CVE-2018-5430 TIBCO · JasperReports

TIBCO JasperReports Server Information Disclosure Vulnerability

Technical Severity

CVSS v3.1 Metrics

HIGH
7.7 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitation Likelihood

EPSS Prediction

31.41 %
Predictive Probability
Percentile Rank
96.6 th

Documented as more likely to be exploited than 96.6% of known CVEs.

Detection Date

Dec 29, 2022

Remediation Due

Jan 19, 2023

CISA Catalog Active

Threat Analysis

TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.

Remediation Directive

Apply updates per vendor instructions.

External Intelligence

https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430

https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430
NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2018-5430