Solution: Instead of using the Apache CORS filter, use the third party CORS filter that is currently known to work. 

http://software.dzhuvinov.com/cors-filter-installation.html 

The CORS filter is a component outside of the Jasperserver product not supplied by JasperSoft out-of-the-box. You will need to investigate and see what the legal and other ramifications are for including the third party jars in your installation. 

You can still follow the Apache CORS filter directions for the parameters: 

http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter 

but with the following changes: 

Replace 

<filter> 
 <filter-name>CorsFilter</filter-name> 
 <filter-class>org.apache.catalina.filters.CorsFilter</filter-class> 
</filter> 
<filter-mapping> 
 <filter-name>CorsFilter</filter-name> 
 <url-pattern>/*</url-pattern> 
</filter-mapping> 

With 

<filter> 
 <filter-name>CORS</filter-name> 
 <filter-class>com.thetransactioncompany.cors.CORSFilter</filter-class> 
</filter> 
<filter-mapping> 
 <filter-name>CORS</filter-name> 
 <url-pattern>/*</url-pattern> 
</filter-mapping> 

Add the 2 jars provided in the third party link to WEB-INF/lib and restart Jasperserver.