Vulnerabilities

TI-2023-14930 CVE-2023-31224 · GHSA-9cxj-f8g7-43v7

There is broken access control during authentication in Jamf Pro Server before 10.46.1.

MEDIUM 43

There is broken access control during authentication in Jamf Pro Server before 10.46.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2023-12-25 No fix listed CWE-287

TI-2021-17742 CVE-2021-40809 · GHSA-jvrm-5w3f-73xf

MEDIUM 41

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01479 Published 2021-12-01 No fix listed CWE-918

TI-2021-16676 CVE-2021-39303 · GHSA-2f86-pr4w-rpg5

MEDIUM 46

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01725 Published 2021-11-12 No fix listed CWE-918

TI-2021-14003 CVE-2021-35037 · GHSA-mpmp-43vw-64c6

LOW 28

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00587 Published 2021-07-12 No fix listed CWE-601

TI-2021-10673 CVE-2021-30125 · GHSA-f3h9-c3qf-pc2f

LOW 28

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00609 Published 2021-04-02 No fix listed CWE-79

TI-2019-12743 CVE-2019-17076 · GHSA-mrxg-ghr4-x5rm

MEDIUM 47

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02505 Published 2020-01-08 No fix listed CWE-502

TI-2018-07375 CVE-2018-10465 · GHSA-qm5m-j3mj-33hq

MEDIUM 40

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01213 Published 2020-01-07 No fix listed