Skip to content
COOEY

EXPOSURES › CVE-2018-18809

CVE-2018-18809

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-12-29 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-18809 ↗
⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

TIBCO JasperReports had an unpatched directory traversal vulnerability exploited in the wild

TIBCO JasperReports Library allowed authenticated users to access host system files via crafted report parameters, posing a data breach risk.

Shame score — Authenticated users could exploit a directory traversal vulnerability to access host system files, leading to a potential data breach.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
TIBCO · vendorJasperReports · product
DESCRIPTION

TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.