Read the docs

Jaspersoft

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Jaspersoft records in CISA KEV

No Jaspersoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jasperreports 1 record LOW

Records

5 records

TI-2025-09619 CVE-2025-10492 · GHSA-7c3f-cg9x-f3gr

Jaspersoft Library Deserialisation Vulnerability

Priority MEDIUM 41

A Java deserialisation vulnerability has been discovered in Jaspersoft Library.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00922 Published 2025-09-16 Fixed in 7.0.4 CWE-502
TI-2026-05272 CVE-2026-6009 · GHSA-9wxq-mwqw-8hhg

Jaspersoft Library Deserialisation Vulnerability

Priority MEDIUM 40

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00516 Published 2026-05-19 Fixed in 7.0.7 CWE-502
TI-2024-03116 CVE-2024-3325 · GHSA-c2q4-mfpf-x8wh

JasperReports Server Driver upload vulnerability

Priority MEDIUM 40

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00591 Published 2024-07-10 No fix listed CWE-269
TI-2017-10964 CVE-2017-14941 · GHSA-rqxj-x345-gj9f

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability…

Priority LOW 31

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01039 Published 2017-10-01 No fix listed CWE-200
Open these records in search →