How many Jaspersoft JasperReports Server CVEs are in CISA KEV?

None of Jaspersoft JasperReports Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Jaspersoft JasperReports Server are affected?

8 distinct Jaspersoft JasperReports Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Jaspersoft JasperReports Server CVEs?

Jaspersoft JasperReports Server's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-611 (Improper Restriction of XML External Entity Reference).

How many critical Jaspersoft JasperReports Server vulnerabilities are there?

Jaspersoft JasperReports Server has 1 critical and 2 high-severity CVEs.

What is the average severity of Jaspersoft JasperReports Server CVEs?

The average CVSS base score across Jaspersoft JasperReports Server's scored CVEs is 8.9.

RadicalNotion.AI

Log in Start free

Jaspersoft

3 CVEs

Jaspersoft JasperReports Server Vulnerabilities

Name: Jaspersoft JasperReports Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for JasperReports Server by Jaspersoft.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.9

Avg CVSS

2025–2026

Last updated August 10, 2026

Overview

Jaspersoft JasperReports Server has 3 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Jaspersoft JasperReports Server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Jaspersoft JasperReports Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Jaspersoft JasperReports Server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Jaspersoft JasperReports Server CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Jaspersoft JasperReports Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 10.0.01 CVE
<= 9.0.01 CVE
10.0.0 <= v < HF-101 CVE
9.0.0 <= v < HF-91 CVE

Fixed in

> 10.0.01 CVE
> 9.0.01 CVE
HF-101 CVE
HF-91 CVE

Find a version

3 CVEs

Sort

JasperReports Server: XXE Injection Vulnerability (Unauthenticated)
CVE-2026-16626
Patch
CWE-611
Critical · CVSS 9.3
EPSS 0.3% (26th pct)2026-08-10
Jaspersoft Library Deserialisation Vulnerability
CVE-2026-6009
Patch
CWE-502
High · CVSS 8.7
EPSS 0.5% (39th pct)2026-05-19
Jaspersoft Library Deserialisation Vulnerability
CVE-2025-10492
Patch
CWE-502
High · CVSS 8.7
EPSS 0.9% (57th pct)2025-09-16

Common weakness types

The CWE weakness categories most often found in Jaspersoft JasperReports Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Jaspersoft JasperReports Server CVEs were published each year.

2025

1

2026

2

Other Jaspersoft products

Browse vulnerabilities for other products by Jaspersoft.

jasperreports2 CVEs JasperReport Servers2 CVEs JasperReports IO At-Scale2 CVEs JasperReports IO Professional2 CVEs JasperReports Library Community Edition2 CVEs JasperReports Library Professional2 CVEs JasperReports Web Studio2 CVEs Jaspersoft Studio Community Edition2 CVEs

All Jaspersoft vulnerabilities

Frequently asked questions

Common questions about Jaspersoft JasperReports Server vulnerabilities.

How many CVEs does Jaspersoft JasperReports Server have?: Jaspersoft JasperReports Server has 3 published CVE records since 2025.
How many Jaspersoft JasperReports Server CVEs are in CISA KEV?: None of Jaspersoft JasperReports Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Jaspersoft JasperReports Server vulnerabilities?: No Jaspersoft JasperReports Server CVEs currently have a tracked public exploit in this dataset.
Which versions of Jaspersoft JasperReports Server are affected?: 8 distinct Jaspersoft JasperReports Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Jaspersoft JasperReports Server CVEs?: Jaspersoft JasperReports Server's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-611 (Improper Restriction of XML External Entity Reference).
How many critical Jaspersoft JasperReports Server vulnerabilities are there?: Jaspersoft JasperReports Server has 1 critical and 2 high-severity CVEs.
What is the average severity of Jaspersoft JasperReports Server CVEs?: The average CVSS base score across Jaspersoft JasperReports Server's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Jaspersoft JasperReports Server vulnerabilities

Monitor new Jaspersoft JasperReports Server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing