GCVE - cpe:2.3:a:jamf:jamf:*:*:*:*:pro:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jamf:jamf:*:*:*:*:pro:*:*:*

part: a version: * update: *

Vendor	Jamf (`1662c813-4922-5e92-8b5f-67bca7ad630e`)
Product	Jamf (`806f86db-d753-5be0-9c27-8d404e78a834`)
Edition	*
Language	*
Software edition	pro
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-31224`	vulnerable	2026-06-08 06:04:42.378393	Details available There is broken access control during authentication in Jamf Pro Server before 10.46.1. Published: 2023-12-25T00:00:00.000Z Updated: 2024-08-02T14:53:30.641Z Open on db.gcve.eu Reference links https://learn.jamf.com/bundle/jamf-pro-release-notes-10.47.0/page/Resolved_Issues.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40809`	vulnerable	2026-06-08 05:35:19.066614	Details available An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows. Published: 2021-12-01T00:10:04.000Z Updated: 2024-08-04T02:51:07.044Z Open on db.gcve.eu Reference links https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/ https://docs.jamf.com/10.32.0/jamf-pro/release-notes/Resolved_Issues.html https://blog.assetnote.io/2021/11/30/jamf-ssrf/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-39303`	vulnerable	2026-06-08 05:33:49.967654	Details available The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability. Published: 2021-11-12T20:36:59.000Z Updated: 2024-08-04T02:06:42.389Z Open on db.gcve.eu Reference links https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/ https://docs.jamf.com/10.32.0/jamf-pro/release-notes/Resolved_Issues.html https://blog.assetnote.io/2021/11/30/jamf-ssrf/ https://community.jamf.com/t5/jamf-pro/what-s-new-in-jamf-pro-10-32-release/m-p/246505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35037`	vulnerable	2026-06-08 05:32:17.534116	Details available Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may be malicious. This is tracked via Jamf with the following ID: PI-009822 Published: 2021-07-12T10:56:44.000Z Updated: 2024-08-04T00:33:49.869Z Open on db.gcve.eu Reference links https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/ https://www.jamf.com/jamf-nation/discussions/39219/jamf-pro-10-30-1-security-upgrade	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30125`	vulnerable	2026-06-08 05:31:46.915351	Details available Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376. Published: 2021-04-02T19:19:39.000Z Updated: 2024-08-03T22:24:59.247Z Open on db.gcve.eu Reference links https://docs.jamf.com/10.28.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17076`	vulnerable	2026-06-08 05:13:09.869652	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10465`	vulnerable	2026-06-08 05:10:26.678007	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.