İçeriğe atla
Noroxi

Jamf kayıtları

jamf üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

11 kayıt
  • CVE-2019-17076
    40Planlayın

    An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.

    KritikCVSS 9,8İstismar yokEPSS %3

    jamf · jamf8 Oca 2020

  • CVE-2021-39303
    40Planlayın

    The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352.

    KritikCVSS 9,8İstismar yokEPSS %2

    jamf · jamf12 Kas 2021

  • CVE-2023-31224
    39İzleyin

    There is broken access control during authentication in Jamf Pro Server before 10.46.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    jamf · jamf25 Ara 2023

  • CVE-2021-40809
    35İzleyin

    An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921.

    YüksekCVSS 8,8İstismar yokEPSS %1

    jamf · jamf30 Kas 2021

  • CVE-2018-10465
    35İzleyin

    Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.

    YüksekCVSS 8,8İstismar yokEPSS %1

    jamf · jamf7 Oca 2020

  • CVE-2022-29564
    30İzleyin

    Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrast

    YüksekCVSS 7,5İstismar yokEPSS %1

    jamf · private access7 Haz 2022

  • CVE-2019-9146
    30İzleyin

    Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to

    YüksekCVSS 7,5İstismar yokEPSS %1

    jamf · self service25 Şub 2019

  • CVE-2024-4395
    29İzleyin

    Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation

    YüksekCVSS 7,3İstismar yokEPSS %0

    jamf · jamf compliance editor27 Haz 2024

  • CVE-2012-4051
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Su

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    jamf · casper suite28 Eyl 2012

  • CVE-2021-30125
    24İzleyin

    Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.

    OrtaCVSS 6,1İstismar yokEPSS %1

    jamf · jamf2 Nis 2021

  • CVE-2021-35037
    24İzleyin

    Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-pre

    OrtaCVSS 6,1İstismar yokEPSS %1

    jamf · jamf12 Tem 2021