High WID-SEC-2025-2067 1 CVE

JasPer: Schwachstelle ermöglicht Codeausführung

Published Sep 16, 2025 · Updated Sep 16, 2025 · de-DE

Vendor: TIBCO Software Product: JasperReports Product: JasperReports Library Professional & Jaspersoft Studio Professional Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in JasPer ausnutzen, um beliebigen Programmcode auszuführen.

Product

JasPer ist eine Implementation des JPEG 2000 Part 1 Komprimierungsstandards.

Vulnerabilities 1

High 8.7

CVE-2025-10492

Jaspersoft Library Deserialisation Vulnerability

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Jaspersoft JasperReports Server JasperReports IO At-Scale Jaspersoft Studio Community Edition Ubuntu Maven

Sep 16, 2025

Revision history

2025-09-16 #1
Initiale Fassung

References

Jaspersoft Security Advisory vom 2025-09-16
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/