The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server TIBCO JasperReports Server Community Edition TIBCO JasperReports Server for ActiveMatrix BPM TIBCO Jaspersoft for AWS with Multi-Tenancy and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow in the context of a non-default permissions configuration persisted cross-site scripting (XSS) attacks. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2 TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2 TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2 TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2 TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.