JU
Product
Jumpserver
24
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 9High 5Medium 10Low 0
Watch
Add Jumpserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29202 | 9.9 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system Affected: 3.0.0 before 3.10.7 |
| CVE-2024-29201 | 9.9 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system Affected: 3.0.0 before 3.10.7 |
| CVE-2023-43651 | 9.9 | Sep 27 | JumpServer is an open source bastion host Affected: 2.0.0 before 2.28.20; 3.0.0 before 3.7.1 |
| CVE-2023-28110 | 9.9 | Mar 16 | Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service Affected: before 2.28.8 |
| CVE-2024-40629 | 9.8 | Jul 18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and… Affected: 3.0.0 before 3.10.12 |
| CVE-2023-48193 | 9.8 | Nov 28 | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function Affected: 3.8.0 |
| CVE-2023-42818 | 9.8 | Sep 27 | JumpServer is an open source bastion host Affected: before 3.5.6; 3.6.0 before 3.6.5 |
| CVE-2024-40628 | 9.1 | Jul 18 | JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and… Affected: 3.0.0 before 3.10.12 |
| CVE-2023-43652 | 9.1 | Sep 27 | JumpServer is an open source bastion host Affected: 2.0.0 before 2.28.20; 3.0.0 before 3.7.1 |
Showing 9