Jamf

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Jamf records in CISA KEV

No Jamf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jamf 7 records MEDIUM Casper Suite 1 record LOW Private Access 1 record LOW Self Service 1 record LOW

Records

7 records in Jamf · all components

TI-2019-12743 CVE-2019-17076 · GHSA-mrxg-ghr4-x5rm

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.

MEDIUM 47

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02505 Published 2020-01-08 No fix listed CWE-502

TI-2021-16676 CVE-2021-39303 · GHSA-2f86-pr4w-rpg5

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.

MEDIUM 46

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01725 Published 2021-11-12 No fix listed CWE-918

TI-2023-14930 CVE-2023-31224 · GHSA-9cxj-f8g7-43v7

There is broken access control during authentication in Jamf Pro Server before 10.46.1.

MEDIUM 43

There is broken access control during authentication in Jamf Pro Server before 10.46.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2023-12-25 No fix listed CWE-287

TI-2021-17742 CVE-2021-40809 · GHSA-jvrm-5w3f-73xf

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921.

MEDIUM 41

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01479 Published 2021-12-01 No fix listed CWE-918

TI-2018-07375 CVE-2018-10465 · GHSA-qm5m-j3mj-33hq

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.

MEDIUM 40

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01213 Published 2020-01-07 No fix listed

TI-2021-14003 CVE-2021-35037 · GHSA-mpmp-43vw-64c6

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting…

LOW 28

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00587 Published 2021-07-12 No fix listed CWE-601

TI-2021-10673 CVE-2021-30125 · GHSA-f3h9-c3qf-pc2f

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.

LOW 28

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2021-04-02 No fix listed CWE-79

Open these records in search →

Critical	3
High	5
Medium	5
Low	0
No CVSS	0