{"id":"CVE-2018-5430","published":"2018-04-17T18:29:00Z","modified":"2026-06-17T02:00:17Z","title":"TIBCO JasperReports Server Information Disclosure Vulnerability","vendor":"TIBCO","product":"JasperReports","tier":"core","eol":null,"description":{"text":"The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3;6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.","provenance":"source","from":"NVD"},"summary":{"text":"The Spring web flows in TIBCO JasperReports Server and several related editions (Community Edition, the ActiveMatrix BPM build, and the AWS-hosted Jaspersoft offerings) contain an information disclosure flaw. An attacker who holds any valid user account on an affected release can, over the network and without user interaction, read the contents of the web application, including key configuration files.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T04:54:19Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.48054,"percentile":0.98855,"date":"2026-10-30","provenance":"source"},"kev":{"dateAdded":"2022-12-29","dueDate":"2023-01-19","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430;https://nvd.nist.gov/vuln/detail/CVE-2018-5430","provenance":"source"},"vulncheckKev":{"dateAdded":"2022-12-29","exploitedFirstSeen":"2022-12-29","ransomware":false,"evidence":[{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-12-29"},{"url":"https://info.greynoise.io/hubfs/resources/GreyNoise-How-Resurgent-Vulnerabilities-Jeopardize-Organizational-Security-Report.pdf","date":"2025-04-23"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"},{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/44623/","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430","tags":["Broken Link","Vendor Advisory"]},{"url":"https://rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/44623/","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430","tags":["Broken Link","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-5430","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Exploited via authenticated web application access","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"may allow any authenticated user read-only access to the contents of the web application","start":297,"end":385}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Reads local configuration files from the application","mappingType":"primary_impact","evidence":[{"from":"description","quote":"read-only access to the contents of the web application, including key configuration files","start":330,"end":420}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-17200","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-17200","exploited":true,"exploitedSince":"2022-12-29","provenance":"source"},"exploits":[{"id":44623,"url":"https://www.exploit-db.com/exploits/44623","title":"JasperReports - (Authenticated) File Read","type":"webapps","platform":"multiple","date":"2018-05-03","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-05-03"},"first":{"date":"2018-05-03","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/44623"},"provenance":"source"},"exploitRefs":["https://rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/","https://www.exploit-db.com/exploits/44623/"],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1005"],"provenance":"ai"}],"timeline":[{"date":"2018-04-17","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5430","provenance":"source"},{"date":"2018-05-03","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-44623)","url":"https://www.exploit-db.com/exploits/44623","provenance":"source"},{"date":"2022-12-29","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","provenance":"source"},{"date":"2022-12-29","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-12-29","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-17200","provenance":"source"}],"speed":{"daysToPublicExploit":16,"firstExploitFrom":"Exploit-DB","daysToKev":1717},"priority":{"score":68.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1402 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.77,"detail":"percentile 0.9886"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}