8.7Yüksek
CVE-2025-10492Jaspersoft Library Deserialisation Vulnerability
Açıklama
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
Zayıflık türü (CWE):
CWE-502
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| cloud | jasperreports io | ≤ 4.0.0 | |
| cloud | jasperreports library | ≤ 7.0.3 | |
| cloud | jasperreports server | ≤ 9.0.0 | |
| cloud | jasperreports studio | ≤ 7.0.3 | |
| cloud | jasperreports web studio | ≤ 3.0.1 | |
| Jaspersoft | JasperReports IO At-Scale | ≤ 4.0.0 | |
| Jaspersoft | JasperReports IO Professional | ≤ 4.0.0 | |
| Jaspersoft | JasperReports Library Community Edition | ≤ 7.0.3 | |
| Jaspersoft | JasperReports Library Professional | ≤ 9.0.2 | |
| Jaspersoft | JasperReports Server | ≤ 9.0.0 | |
| Jaspersoft | JasperReports Web Studio | ≤ 3.0.1 | |
| Jaspersoft | Jaspersoft Studio Community Edition | ≤ 7.0.3 | |
| Jaspersoft | Jaspersoft Studio Professional | ≤ 9.0.2 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (8)
cpe:2.3:a:cloud:jasperreports_io:*:*:*:*:at-scale:*:*:*≤ 4.0.0cpe:2.3:a:cloud:jasperreports_io:*:*:*:*:professional:*:*:*≤ 4.0.0cpe:2.3:a:cloud:jasperreports_library:*:*:*:*:community:*:*:*≤ 7.0.3cpe:2.3:a:cloud:jasperreports_library:*:*:*:*:professional:*:*:*≤ 9.0.2cpe:2.3:a:cloud:jasperreports_server:*:*:*:*:*:*:*:*≤ 9.0.0cpe:2.3:a:cloud:jasperreports_studio:*:*:*:*:community:*:*:*≤ 7.0.3cpe:2.3:a:cloud:jasperreports_studio:*:*:*:*:professional:*:*:*≤ 9.0.2cpe:2.3:a:cloud:jasperreports_web_studio:*:*:*:*:*:*:*:*≤ 3.0.1