Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Cloud records in CISA KEVNo Cloud vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 66
Cross-site scripting (XSS)
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.75484 · Published 2024-01-17 · Fixed in 1, 0 +2 CWE-79
Priority MEDIUM 41
A Java deserialisation vulnerability has been discovered in Jaspersoft Library.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00922 · Published 2025-09-16 · Fixed in 7.0.4 CWE-502
Priority MEDIUM 40
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00591 · Published 2024-07-10 · No fix listed CWE-269
Open these records in search →