Jaspersoft Jasperreports IO Professional vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jaspersoft Jasperreports IO Professional, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-10492cloudjasperreports_io+14
EPSS score
0.92%
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library8.7CVE-2026-6009ubuntujasperreports+9
EPSS score
0.66%
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system