Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in jasperreports (CVE-2025-10492)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2025-10492 reported for jasperreports-7.0.2.jar. Vulnerability Details CVEID:CVE-2025-10492 DESCRIPTION: A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied...

MiracleLinux 8 : kernel-4.18.0-553.60.1.el8_10 (AXSA:2025-10492:41)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10492:41 advisory. kernel: Bluetooth: Fix use after free in hcisendacl CVE-2022-49111 kernel: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set...

CVE-2024-10492 vulnerabilities

Vulnerabilities for packages: keycloak...

No title provided

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator . As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...

CVE-2025-10492

creationtimestamp| type| source ---|---|--- 2025-09-16 19:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyy2hw5lq52i 2025-10-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-948/ 2026-01-10 19:54:39+00:00| seen|...

africa.absa:inception-reporting (>=1.0.0, <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0, <=1.2.0) +433 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (>=3.7.0, <=7.0.3)

net.sf.jasperreports:jasperreports MAVEN version =3.7.0, =1.0.0, =1.0.0, =4.0.4, =1.0.0, =1.0.7, =2.1.0, =2.1.0, =0.0.1, =0.0.1, =20.3.0, =24.2.0, =20.3.0, =2.23.5, =2.23.5, =23.1.0, =25.12.0 and more Source cves: CVE-2025-10492 Source advisory: SNYK:JAVA-NETSFJASPERREPORTS-14912438...

net.sourceforge.dynamicreports:dynamicreports-core (>=1.4.1, <=1.5.2) potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (3.7.2)

net.sf.jasperreports:jasperreports MAVEN version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sourceforge.dynamicreports:dynamicreports-core =1.4.1, =1.5.2 Source cves: CVE-2025-104...

io.mosip.kernel:kernel-jasperreport-service (0.0.1-rc1) potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (3.7.5)

net.sf.jasperreports:jasperreports MAVEN version 3.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - io.mosip.kernel:kernel-jasperreport-service 0.0.1-rc1 Source cves: CVE-2025-10492 Source...

br.com.damsete.arq:damsete-arq-report (0.0.8), com.alexnederlof:jasperreports-plugin (2.6) +33 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.9.0)

net.sf.jasperreports:jasperreports MAVEN version 6.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.damsete.arq:damsete-arq-report 0.0.8 - com.alexnederlof:jasperreports-plugin 2.6 -...

ar.com.fdvs:dynamicjasper (5.3.0), br.com.damsete:ireport (>=0.0.1, <=0.0.3) +20 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.11.0)

net.sf.jasperreports:jasperreports MAVEN version 6.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - ar.com.fdvs:dynamicjasper 5.3.0 - br.com.damsete:ireport =0.0.1, =1.3.0, =4.5.31, =0.0.5,...

br.com.damsete.arq:damsete-arq-report (>=0.0.9, <=0.0.12), com.epam.reportportal:service-api (5.0.0) +6 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.10.0)

net.sf.jasperreports:jasperreports MAVEN version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.damsete.arq:damsete-arq-report =0.0.9, =0.0.12 - com.epam.reportportal:service-api...

net.sf.jasperreports:jasperreports-chart-customizers (6.12.1), net.sf.jasperreports:jasperreports-chart-themes (6.12.1) +3 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.12.1)

net.sf.jasperreports:jasperreports MAVEN version 6.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sf.jasperreports:jasperreports-chart-customizers 6.12.1 -...

ar.com.fdvs:dynamicjasper (5.3.1), com.sfxcode.sapphire:sapphire-extension_2.12 (1.0.9) +6 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.13.0)

net.sf.jasperreports:jasperreports MAVEN version 6.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - ar.com.fdvs:dynamicjasper 5.3.1 - com.sfxcode.sapphire:sapphire-extension2.12 1.0.9 -...

com.sfxcode.sapphire:sapphire-extension_2.12 (>=1.0.10, <=1.1.0), com.sfxcode.sapphire:sapphire-extension_2.13 (>=1.0.10, <=1.1.0) +12 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.14.0)

net.sf.jasperreports:jasperreports MAVEN version 6.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.sfxcode.sapphire:sapphire-extension2.12 =1.0.10, =1.0.10, =9.9.9-20201009170109,...

com.pro-crafting.tools:jasperreports-plugin (3.5.3), net.sf.jasperreports:jasperreports-castor (6.20.2) +5 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.20.2)

net.sf.jasperreports:jasperreports MAVEN version 6.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.pro-crafting.tools:jasperreports-plugin 3.5.3 -...

com.actiontestscript:ats-automated-testing (3.1.0), com.pro-crafting.tools:jasperreports-plugin (3.6.0) +14 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.21.0)

net.sf.jasperreports:jasperreports MAVEN version 6.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.actiontestscript:ats-automated-testing 3.1.0 -...

br.com.swconsultoria:java-danfe (>=1.5, <=1.8), br.com.swconsultoria:java-nfe (>=4.00.41, <=4.2.0) +37 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.20.6)

net.sf.jasperreports:jasperreports MAVEN version 6.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.swconsultoria:java-danfe =1.5, =4.00.41, =1.0.1, =1.0.8, =13.0.0, =1.12.0, =1.18.0,...

cn.sparrowmini:sparrow-bpm (0.0.1), cn.sparrowmini:sparrow-form (0.0.1) +48 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.21.3)

net.sf.jasperreports:jasperreports MAVEN version 6.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - cn.sparrowmini:sparrow-bpm 0.0.1 - cn.sparrowmini:sparrow-form 0.0.1 -...

com.alexnederlof:jasperreports-plugin (2.8), com.pro-crafting.tools:jasperreports-plugin (3.0.0) +10 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.15.0)

net.sf.jasperreports:jasperreports MAVEN version 6.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.alexnederlof:jasperreports-plugin 2.8 - com.pro-crafting.tools:jasperreports-plugin...

com.anji-plus:spring-boot-starter-gaea-export (>=1.0.0.release, <=2.1.0.release), com.pro-crafting.tools:jasperreports-plugin (3.1.0) +14 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (6.16.0)

net.sf.jasperreports:jasperreports MAVEN version 6.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.anji-plus:spring-boot-starter-gaea-export =1.0.0.release, =1.0.2, =1.0.2, =0.35, =0.35...