CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-10492

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.1%

CVSS Severity

CVSS v3 Score 9.8

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/

Products affected by CVE-2025-10492

Cloud » Jasperreports Io » Version: 4.0.0

cpe:2.3:a:cloud:jasperreports_io:4.0.0
Cloud » Jasperreports Library » Version: 7.0.3

cpe:2.3:a:cloud:jasperreports_library:7.0.3
Cloud » Jasperreports Library » Version: 9.0.2

cpe:2.3:a:cloud:jasperreports_library:9.0.2
Cloud » Jasperreports Server » Version: 8.0.4

cpe:2.3:a:cloud:jasperreports_server:8.0.4
Cloud » Jasperreports Server » Version: 8.2.0

cpe:2.3:a:cloud:jasperreports_server:8.2.0
Cloud » Jasperreports Server » Version: 9.0.0

cpe:2.3:a:cloud:jasperreports_server:9.0.0
Cloud » Jasperreports Studio » Version: 7.0.3

cpe:2.3:a:cloud:jasperreports_studio:7.0.3
Cloud » Jasperreports Studio » Version: 9.0.2

cpe:2.3:a:cloud:jasperreports_studio:9.0.2
Cloud » Jasperreports Web Studio » Version: 3.0.1

cpe:2.3:a:cloud:jasperreports_web_studio:3.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-10492

Products

Pricing

Contact Us