CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-10492

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 51.7%

CVSS Severity

CVSS v3 Score 9.8

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/

Products affected by CVE-2025-10492

Cloud » Jasperreports Io » Version: Any

cpe:2.3:a:cloud:jasperreports_io:*
Cloud » Jasperreports Library » Version: Any

cpe:2.3:a:cloud:jasperreports_library:*
Cloud » Jasperreports Server » Version: Any

cpe:2.3:a:cloud:jasperreports_server:*
Cloud » Jasperreports Studio » Version: Any

cpe:2.3:a:cloud:jasperreports_studio:*
Cloud » Jasperreports Web Studio » Version: Any

cpe:2.3:a:cloud:jasperreports_web_studio:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-10492

Products

Pricing

Contact Us