←All topics

deserialisation

1 piece of writing

ics8 min read

CVE-2025-10492: a Java deserialisation flaw in Jasper Report gives attackers remote code execution on Hitachi Energy Ellipse

CVE-2025-10492 is a CVSS 9.8 Java deserialisation flaw in the JasperSoft Library used by Hitachi Energy Ellipse. It enables unauthenticated RCE on critical manufacturing systems worldwide. No patch exists for the community edition of the affected library.