GHSA-9wxq-mwqw-8hhg

Опубликовано: 19 мая 2026

Источник: github

Github: Прошло ревью

CVSS4: 8.7

Описание

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Ссылки

Пакеты

Наименование

net.sf.jasperreports:jasperreports

maven

Затронутые версииВерсия исправления

< 7.0.7

7.0.7

EPSS

Процентиль: 39%

0.00476

Низкий

8.7 High

CVSS4

CVE ID

CVE-2026-6009

Дефекты

CWE-502

Связанные уязвимости

CVE-2026-6009

ubuntu

3 месяца назад

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

CVE-2026-6009

nvd

3 месяца назад

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

CVE-2026-6009

debian

3 месяца назад

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads ...

EPSS

Процентиль: 39%

0.00476

Низкий

8.7 High

CVSS4

CVE ID

CVE-2026-6009

Дефекты

CWE-502