A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
JasperReports Library Community Edition
Vendor
Jaspersoft
Product
JasperReports Library Community Edition
Platforms
Unknown
Default status
unaffected
Package
net/sf/jasperreports/jasperreports/
Package collection
https://repo.maven.apache.org/maven2
JasperReports Library Community Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
maven
Unavailable
7.0.3
None listed
Jaspersoft Studio Community Edition
Vendor
Jaspersoft
Product
Jaspersoft Studio Community Edition
Platforms
Unknown
Default status
unaffected
Jaspersoft Studio Community Edition · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
7.0.3
None listed
JasperReports Server
Vendor
Jaspersoft
Product
JasperReports Server
Platforms
Unknown
Default status
unaffected
JasperReports Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
9.0.0
None listed
JasperReports Library Professional
Vendor
Jaspersoft
Product
JasperReports Library Professional
Platforms
Unknown
Default status
unaffected
JasperReports Library Professional · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
9.0.2
None listed
Jaspersoft Studio Professional
Vendor
Jaspersoft
Product
Jaspersoft Studio Professional
Platforms
Unknown
Default status
unaffected
Jaspersoft Studio Professional · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
9.0.2
None listed
JasperReports IO Professional
Vendor
Jaspersoft
Product
JasperReports IO Professional
Platforms
Unknown
Default status
unaffected
JasperReports IO Professional · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
4.0.0
None listed
JasperReports IO At-Scale
Vendor
Jaspersoft
Product
JasperReports IO At-Scale
Platforms
Unknown
Default status
unaffected
JasperReports IO At-Scale · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
Patch
Unavailable
4.0.0
None listed
JasperReports Web Studio
Vendor
Jaspersoft
Product
JasperReports Web Studio
Platforms
Unknown
Default status
unaffected
JasperReports Web Studio · Scoped product and version facts