Skip to content
OpenAdvisories

Vendor

Jaspersoft

4 known vulnerabilities.

Products

JasperReports Server 3 JasperReports Library Community Edition 2 Jaspersoft Studio Community Edition 2 JasperReports Library Professional 2 Jaspersoft Studio Professional 2 JasperReports IO Professional 2 JasperReports IO At-Scale 2 JasperReports Web Studio 2 JasperReport Servers 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-16626

    JasperReports Server: XXE Injection Vulnerability (Unauthenticated)

    Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.

    Jaspersoft JasperReports Server jasperreports Ubuntu