Description
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jaspersoft JasperReports Library Community Edition
Default version status: unaffected
0 to ≤ 7.0.3affected
Jaspersoft Jaspersoft Studio Community Edition
Default version status: unaffected
0 to ≤ 7.0.3affected
Jaspersoft JasperReports Server
Default version status: unaffected
0 to ≤ 9.0.0affected
Jaspersoft JasperReports Library Professional
Default version status: unaffected
0 to ≤ 9.0.2affected
Jaspersoft Jaspersoft Studio Professional
Default version status: unaffected
0 to ≤ 9.0.2affected
Jaspersoft JasperReports IO Professional
Default version status: unaffected
0 to ≤ 4.0.0affected
Jaspersoft JasperReports IO At-Scale
Default version status: unaffected
0 to ≤ 4.0.0affected
Jaspersoft JasperReports Web Studio
Default version status: unaffected
0 to ≤ 3.0.1affected