CVE-2020-9410

CVE-2020-9410 is a high-severity HTML injection vulnerability affecting TIBCO JasperReports Library and JasperReports Server products, including their ActiveMatrix BPM and AWS Marketplace versions. An unauthenticated attacker can exploit this by crafting malicious reports using Fusion Charts and attacker-controlled data sources. When other users view these compromised reports, the attacker can gain full control of the web interface with the viewing user's privileges. The CVSS score is 8.8 (High), indicating a network-based attack with low complexity, requiring user interaction, and leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion for this vulnerability.