8.7Alta
CVE-2026-6009Jaspersoft Library Deserialisation Vulnerability
Descripción
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
Debilidad (CWE):
CWE-502
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Jaspersoft | JasperReports IO At-Scale | ≤ 10.0.0 | |
| Jaspersoft | JasperReports IO Professional | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Library Community Edition | ≤ 7.0.6 | |
| Jaspersoft | JasperReports Library Professional | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Server | ≤ 10.0.0 | |
| Jaspersoft | JasperReports Web Studio | ≤ 10.0.1 | |
| Jaspersoft | Jaspersoft Studio Community Edition | ≤ 7.0.6 | |
| Jaspersoft | Jaspersoft Studio Professional | ≤ 10.0.0 |