Jaspersoft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JasperReports Server | 3 | – | Aug 10, 2026 |
| JasperReports IO At-Scale | 2 | – | May 19, 2026 |
| JasperReports IO Professional | 2 | – | May 19, 2026 |
| JasperReports Library Community Edition | 2 | – | May 19, 2026 |
| JasperReports Library Professional | 2 | – | May 19, 2026 |
| JasperReports Web Studio | 2 | – | May 19, 2026 |
| Jaspersoft Studio Community Edition | 2 | – | May 19, 2026 |
| Jaspersoft Studio Professional | 2 | – | May 19, 2026 |
| JasperReport Servers | 1 | – | Jul 10, 2024 |
Exploited and recent CVEs
- CVE-2026-16626 JasperReports Server: XXE Injection Vulnerability (Unauthenticated) 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability 0.5%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability 0.9%
- CVE-2024-3325 JasperReports Server Driver upload vulnerability 0.6%