Jamf vulnerabilities

Products

• Jamf 7

Newest

• jamf pro [PI141230] Fixed A broken access control issue. CVE-2026-1290 5.3 MediumJanuary 21, 2026
• emlog pro Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation CVE-2024-10183 5.2 MediumOctober 22, 2024
• jamf compliance editor Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation CVE-2024-4395 7.3 HighJune 27, 2024
• jamf There is broken access control during authentication in Jamf Pro Server before 10.46.1. CVE-2023-31224 9.8 CriticalDecember 25, 2023
• jamf private access Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user... CVE-2022-29564 7.5 HighJune 7, 2022
• jamf An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted... CVE-2021-40809 8.8 HighDecember 1, 2021
• jamf The server in Jamf Pro before 10.32.0 has a vulnerability affecting integrity and availability,... CVE-2021-39303 9.8 CriticalNovember 12, 2021
• jamf Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro... CVE-2021-35037 6.1 MediumJuly 12, 2021
• jamf Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376. CVE-2021-30125 6.1 MediumApril 2, 2021
• jamf An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted... CVE-2019-17076 9.8 CriticalJanuary 8, 2020
• jamf Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with... CVE-2018-10465 8.8 HighJanuary 7, 2020
• jamf self service Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging... CVE-2019-9146 7.5 HighFebruary 25, 2019
• jamf casper suite Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF... CVE-2012-4051 Public exploit 6.8 MediumSeptember 28, 2012