8.7Hoch
CVE-2026-6009Jaspersoft Library Deserialisation Vulnerability
Beschreibung
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
Schwachstellentyp (CWE):
CWE-502
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Jaspersoft | JasperReports IO At-Scale | ≤ 10.0.0 | |
| Jaspersoft | JasperReports IO Professional | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Library Community Edition | ≤ 7.0.6 | |
| Jaspersoft | JasperReports Library Professional | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Server | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Web Studio | ≤ 10.0.1 | |
| Jaspersoft | Jaspersoft Studio Community Edition | ≤ 7.0.6 | |
| Jaspersoft | Jaspersoft Studio Professional | ≤ 10.0.0 |