CVE-2017-5533

A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/bid/101878Third Party Advisory, VDB Entry
• http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017Issue Tracking, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/bid/101878Third Party Advisory, VDB Entry
• http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017Issue Tracking, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Published

Nov 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5527TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1…4.3
• CVE-2017-5528Multiple JasperReports Server components contain vulnerabili…8.8
• CVE-2017-5529JasperReports library components contain an information disc…4.1
• CVE-2017-5530The tibbr web server components of tibbr Community, and tibb…8.1
• CVE-2017-5531Deployments of TIBCO Managed File Transfer Command Center ve…8
• CVE-2017-5532A vulnerability in the report renderer component of TIBCO Ja…5.4
• CVE-2017-5534The tibbr user profiles components of tibbr Community, and t…8.8
• CVE-2017-5535The GridServer Broker, GridServer Driver, and GridServer Eng…6.8
• CVE-2017-5536The GridServer Broker, and GridServer Director components of…6.3
• CVE-2017-5537The password reset form in Weblate before 2.10.1 provides di…
• CVE-2017-5538The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core…
• CVE-2017-5539The patch for directory traversal (CVE-2017-5480) in b2evolu…