ACTIVELY EXPLOITED
CVE-2018-5430: TIBCO JasperReports Server Information Disclosure Vulnerability
| Vendor | TIBCO |
|---|---|
| Product | JasperReports |
| Actively exploited | Yes |
| Added to CISA KEV | 29 Dec 2022 |
| CISA federal deadline | 19 Jan 2023 |
| Weakness (CWE) | CWE-22 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files.
SOURCES
Other TIBCO flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.