Jaspersoft: CVE Program partner

CVEs, 365 days23 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Jaspersoft
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Jaspersoft products and services only.
Advisories	https://community.jaspersoft.com/advisories/

CVE-2026-16626 2026-08-10 · CVSS 9.3
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Serv
CVE-2026-6009 2026-05-19 · CVSS 8.7
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected syste
CVE-2025-10492 2025-09-16 · CVSS 8.7
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arb

Jaspersoft