Lucene search
+L

Java Deserialisation

🗓️ 11 May 2026 10:33:05Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 27 Views

Java deserialization flaw in JasperReports allows remote code execution via untrusted input.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in jasperreports (CVE-2025-10492)
4 May 202616:08
–ibm
circl
Circl
CVE-2025-10492
16 Sep 202519:27
–circl
cnnvd
CNNVD
Jaspersoft Library security vulnerabilities
16 Sep 202500:00
–cnnvd
cve
CVE
CVE-2025-10492
16 Sep 202516:41
–cve
cvelist
Cvelist
CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability
16 Sep 202516:41
–cvelist
debiancve
Debian CVE
CVE-2025-10492
29 Oct 202616:57
–debiancve
euvd
EUVD
EUVD-2025-29627
3 Oct 202520:07
–euvd
github
Github Security Blog
JasperReports has a Java deserialisation vulnerability
16 Sep 202518:31
–github
ics
ICS
Hitachi Energy Asset Suite
9 Dec 202500:00
–ics
ics
ICS
Hitachi Energy Ellipse
24 Feb 202600:00
–ics
Rows per page
Vulners
Node
OR
sfjasperreportsRange6.11.0–7.0.3java
sfjasperreportsRange3.6.0–7.0.3java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

08 Aug 2026 16:20Current
7.7High risk
Vulners AI Score7.7
CVSS 3.19.8
CVSS 48.7
EPSS0.00922
SSVC
27