Jaspersoft Jasperreports Server vulnerabilities

3 vulnerabilities

Known vulnerabilities in Jaspersoft Jasperreports Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-10492cloudjasperreports_io+14
EPSS score
0.92%
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library9.3CVE-2026-16626ubuntujasperreports+1
EPSS score
0.45%
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.8.7CVE-2026-6009ubuntujasperreports+9
EPSS score
0.66%
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system