← Database

CVE-2025-10492

CRITICAL CVSS: 9.8 Published: 2025-09-16 Modified: 2026-06-17

Description

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Affected Platforms

Cloud Jasperreports IoCloud Jasperreports ServerCloud Jasperreports LibraryCloud Jasperreports Web StudioCloud Jasperreports Studio

Weakness Type

CWE-502, CWE-502

References