An issue was discovered in JUMP AMS 3.6.0.04.009-2487.
Priority LOW 39CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, aka directory traversal.
Why it matters now
EPSS 0.01181 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:jump-technology:asset_management:3.6.0.04.009-2487:*:*:*:*:*:*:* | 3.6.0.04.009-2487 | Vulnerable | Jump-technology |
- cpe:2.3:a:jump-technology:asset_management:3.6.0.04.009-2487:*:*:*:*:*:*:* Versions 3.6.0.04.009-2487 Vulnerable ·Jump-technology
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-32018
- 2026-10-03 Alias added: GHSA-gmf9-gfhv-6xhp
References
More Jump-technology Asset Management vulnerabilities
- TI-2021-11995 An issue was discovered in JUMP AMS 3.6.0.04.009-2487. CVSS 3.1CRITICAL 9.9
- TI-2021-11996 An issue was discovered in JUMP AMS 3.6.0.04.009-2487. CVSS 3.1CRITICAL 9.9
Sources
- CVE-2021-32018 · CVE Program
- CVE-2021-32018 · NVD
- FIRST EPSS
- GHSA-gmf9-gfhv-6xhp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences