Filtered by vendor Jaspersoft Subscriptions
Filtered by product Jasperreports Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-10492 1 Jaspersoft 1 Jasperreports 2025-09-17 N/A
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
CVE-2017-14941 1 Jaspersoft 1 Jasperreports 2025-04-20 N/A
Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector.