A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of
    externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the
    affected library (CVE-2025-10492)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of     externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the     affected library (CVE-2025-10492)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
438547	SCA: security update for net.sf.jasperreports:jasperreports (GHSA-7c3f-cg9x-f3gr)	Tenable Cloud Security	SCA Checks	Local	high
438547	SCA: security update for net.sf.jasperreports:jasperreports (GHSA-7c3f-cg9x-f3gr)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
265886	Linux Distros Unpatched Vulnerability : CVE-2025-10492	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2025-10492

high

Tenable Plugins

high

high

high