{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: TIBCO vulnerabilities","home_page_url":"https://patchfirst.co/vendor/tibco/","feed_url":"https://patchfirst.co/feed/vendor/tibco.json","description":"New and newly exploited TIBCO CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2018-5430#kev","url":"https://patchfirst.co/cve/CVE-2018-5430/","title":"[KEV] CVE-2018-5430: TIBCO JasperReports Server Information Disclosure Vulnerability","content_text":"TIBCO · JasperReports. In CISA KEV since 2022-12-29. ENISA EUVD lists it as exploited. EPSS 48.1% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.9 of 100.","summary":"TIBCO JasperReports Server Information Disclosure Vulnerability","date_published":"2022-12-29T00:00:00.000Z","date_modified":"2026-06-17T02:00:17.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2022-12-29","ransomware":false},"epss":{"score":0.48054,"percentile":0.98855},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"TIBCO","product":"JasperReports","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-18809#kev","url":"https://patchfirst.co/cve/CVE-2018-18809/","title":"[KEV] CVE-2018-18809: TIBCO JasperReports Library Directory Traversal Vulnerability","content_text":"TIBCO · JasperReports. In CISA KEV since 2022-12-29. ENISA EUVD lists it as exploited. EPSS 79.1% (higher than 99.6% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 67.5 of 100.","summary":"TIBCO JasperReports Library Directory Traversal Vulnerability","date_published":"2022-12-29T00:00:00.000Z","date_modified":"2026-06-17T01:47:56.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":67.5,"kev":{"dateAdded":"2022-12-29","ransomware":false},"epss":{"score":0.79064,"percentile":0.99596},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"TIBCO","product":"JasperReports","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}