Jaspersoft
First CVE: Sep 16, 2025Active for: 1 year
2
CVEs Published
More CVEs Published than 6% of tracked CNAs
1.0
Avg CVEs / Year
Bottom 1%
9.3
Avg CVSS Score
Higher Avg CVSS Score than 99% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by Jaspersoft as a CNA, 0.0% affect products that Jaspersoft develops as a vendor.
100.0%
Self-reported: 0Third-party: 2
Of all the CVEs published that affect products developed by Jaspersoft, 0.0% are self-published by Jaspersoft as a CNA.
100.0%
Self-published: 0Published by other CNAs: 1
Trends Over Time
The number and severity of CVEs published by Jaspersoft over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 16, 2025
10 months ago
Most Recent CVE
May 19, 2026
66 days ago
Top CVEs
All CVEs published by Jaspersoft as a CNA, regardless of affected vendor or product.
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-10492CRITICAL A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely | Sep 16, 2025 | 9.8 | 34 | NO | NO |
CVE-2026-6009HIGH Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system | May 19, 2026 | 8.7 | 32 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA2 CVEs
50%
50%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network2 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (50.0%)
High0 (0.0%)
None1 (50.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (2 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Jaspersoft as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Jaspersoft as a CNA — matched by CVE ID, not by organization name.