Jaspersoft vulnerabilities

Products

• Jasperreports Server 4
• Jasperreports Io At-scale 2
• Jasperreports Io Professional 2
• Jasperreports Library Community Edition 2
• Jasperreports Library Professional 2
• Jasperreports Web Studio 2
• Studio Community Edition 2
• Studio Professional 2

Newest

• jaspersoft jasperreports server JasperReports Server: XXE Injection Vulnerability (Unauthenticated) CVE-2026-16626 9.3 CriticalAugust 10, 2026
• jaspersoft jasperreports io at-scale, jasperreports io professional, jasperreports library community edition +5 more +7 more Jaspersoft Library Deserialisation Vulnerability CVE-2026-6009 Public exploitFix available 8.7 HighMay 19, 2026
• cloud jasperreports io, jasperreports library, jasperreports server +8 more +10 more Jaspersoft Library Deserialisation Vulnerability CVE-2025-10492 Fix available 8.7 HighSeptember 16, 2025
• cloud jasperreports server, jaspersoft jasperreport servers +1 more JasperReports Server Driver upload vulnerability CVE-2024-3325 8.6 HighJuly 10, 2024
• jaspersoft jasperreports server Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-3323 8.3 HighApril 17, 2024
• jaspersoft jasperreports Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which... CVE-2017-14941 6.5 MediumOctober 1, 2017