You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-10492
About this tag
CVE-2025-10492 is a critical deserialization vulnerability in the JasperReports component of Hitachi Energy's Ellipse enterprise asset management platform. With a CVSS 3.1 score of 9.8, it allows remote code execution without authentication or user interaction on Ellipse versions 9.0.50 and earlier. This tag covers discussions about the flaw's impact, mitigation steps, and industrial cybersecurity implications for organizations using affected Ellipse deployments.
Hitachi Energy’s Ellipse enterprise asset management platform is now at the center of a high-severity industrial cybersecurity warning, after CISA republished a vendor advisory describing a critical deserialization flaw in the JasperReports component used for custom reporting. The issue is...