Description

Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.

INFO

Published Date :

2024-04-17T18:53:21.348Z

Last Modified :

2024-08-01T20:05:08.445Z

Source :

tibco
AFFECTED PRODUCTS

The following products are affected by CVE-2024-3323 vulnerability.

Vendors Products
Tibco
  • Jasperreports Server
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-3323.

URL Resource
https://community.tibco.com/advisories/tibco-security-advisory-april-9-2024-tibco-jasperreports-server-cve-2024-3323-r209/ cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact