Priority LOW 24
Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00395 · Published 2026-01-21 · No fix listed CWE-305
Priority LOW 23
A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems.
CVSS 4.0MEDIUM 5.2· Local · Low privileges · No interaction · EPSS 0.00143 · Published 2024-10-22 · No fix listed CWE-276
Priority HIGH 67
The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.
CVSS 4.0HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00211 · Published 2024-06-27 · Fixed in 1.3.1 CWE-269
Priority MEDIUM 43
There is broken access control during authentication in Jamf Pro Server before 10.46.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00585 · Published 2023-12-25 · No fix listed CWE-287
Priority LOW 35
Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00964 · Published 2022-06-07 · No fix listed
Priority MEDIUM 41
An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01479 · Published 2021-12-01 · No fix listed CWE-918
Priority MEDIUM 46
The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01725 · Published 2021-11-12 · No fix listed CWE-918
Priority LOW 28
Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00587 · Published 2021-07-12 · No fix listed CWE-601
Priority LOW 28
Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00609 · Published 2021-04-02 · No fix listed CWE-79
Priority MEDIUM 47
An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02505 · Published 2020-01-08 · No fix listed CWE-502
Priority MEDIUM 40
Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01213 · Published 2020-01-07 · No fix listed
Priority LOW 34
Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacOS/Terminal" into the…
CVSS 3.0HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00776 · Published 2019-02-25 · No fix listed
Priority LOW 33
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administr…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0147 · Published 2012-09-28 · No fix listed CWE-352
THREATIST.IORead the docs