MEDIUMCVSS v3.1 6.5Actively exploited · CISA KEV since 2022-12-29Vulnerability
CVE-2018-18809
TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host system.
Properties
- Euvd product
- TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server, TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft for AWS with Multi-Tenancy
- Vulnerability name
- TIBCO JasperReports Library Directory Traversal Vulnerability
- First seen
- 2025-10-21T23:45:42+00:00
- Cvss score
- 6.5
- Epss score
- 0.79064
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2023-01-19
- Euvd assigner
- tibco
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Exploited euvd since
- 2022-12-29T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-12-29
- Score
- 6.5
- Euvd base score version
- 3.0
- Fetched at
- 2026-10-20T10:36:20+00:00
- Euvd vendor
- TIBCO Software Inc.
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 9.9
Related Entities (12)
AFFECTS_PRODUCT (9)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph