Jaspersoft vulnerabilities
5 vulnerabilities
Known vulnerabilities in Jaspersoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
Products
10- Jasperreports Server3 vulnerabilities
- Jasperreports IO At Scale2 vulnerabilities
- Jasperreports IO Professional2 vulnerabilities
- Jasperreports Library Community Edition2 vulnerabilities
- Jasperreports Library Professional2 vulnerabilities
- Jasperreports Web Studio2 vulnerabilities
- Jaspersoft Studio Community Edition2 vulnerabilities
- Jaspersoft Studio Professional2 vulnerabilities
- Jasperreport Servers1 vulnerabilities
- Jasperreports1 vulnerabilities
CVE-2025-10492cloudjasperreports_io+14
EPSS score0.92%
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected libraryCVE-2017-14941ubuntujasperreports+1EPSS score1.04%
Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.CVE-2024-3325cloudjasperreports_server+2EPSS score0.59%
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.CVE-2026-16626ubuntujasperreports+1EPSS score0.45%
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server.
This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.CVE-2026-6009ubuntujasperreports+9EPSS score0.66%
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system