Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Jaspersoft Clear all filters
TI-2026-05272 CVE-2026-6009 · GHSA-9wxq-mwqw-8hhg

Jaspersoft Library Deserialisation Vulnerability

Priority MEDIUM 40

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00516 Published 2026-05-19 Fixed in 7.0.7 CWE-502
TI-2025-09619 CVE-2025-10492 · GHSA-7c3f-cg9x-f3gr

Jaspersoft Library Deserialisation Vulnerability

Priority MEDIUM 41

A Java deserialisation vulnerability has been discovered in Jaspersoft Library.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00922 Published 2025-09-16 Fixed in 7.0.4 CWE-502
TI-2024-03116 CVE-2024-3325 · GHSA-c2q4-mfpf-x8wh

JasperReports Server Driver upload vulnerability

Priority MEDIUM 40

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00591 Published 2024-07-10 No fix listed CWE-269
TI-2017-10964 CVE-2017-14941 · GHSA-rqxj-x345-gj9f

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability…

Priority LOW 31

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01039 Published 2017-10-01 No fix listed CWE-200