Jaspersoft vulnerabilities
We track 3 vulnerabilities in Jaspersoft products across 8 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
Latest Jaspersoft vulnerabilities
- 9.3 Critical severity
JasperReports Server: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.
- 8.7 High severity
JasperReports Library Community Edition: Deserialization of Untrusted Data
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
- 9.8 Critical severity
JasperReports Library Community Edition: Deserialization of Untrusted Data
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library