JU
Product
Jumpserver
24
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 9High 5Medium 10Low 0
Watch
Add Jumpserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31864 | 6.8 | Mar 13 | JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering Affected: before 3.10.22; 4.0.0 before 4.10.16 |
| CVE-2025-58044 | 6.1 | Dec 1 | JumpServer has an Open Redirect Vulnerability Affected: before 3.10.19; 4.0.0 before 4.10.5 |
| CVE-2024-24763 | 6.1 | Feb 20 | JumpServer is an open source bastion host and an operation and maintenance security audit system Affected: before 3.10.0 |
| CVE-2024-29024 | 5.3 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system Affected: 3.0.0 before 3.10.6 |
| CVE-2024-29020 | 5.3 | Mar 29 | JumpServer is an open source bastion host and an operation and maintenance security audit system Affected: 3.0.0 before 3.10.6 |
| CVE-2023-46138 | 5.3 | Oct 31 | JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications Affected: before 3.8.0 |
| CVE-2023-46123 | 5.3 | Oct 25 | jumpserver is an open source bastion machine, professional operation and maintenance security audit system that complies with 4A specifications Affected: before 3.8.0 |
| CVE-2023-42442 | 5.3 | Sep 15 | JumpServer is an open source bastion host and a professional operation and maintenance security audit system Affected: 3.0.0 before 3.5.5; 3.6.0 before 3.6.4 |
| CVE-2026-31798 | 5.0 | Mar 13 | JumpServer Improper Certificate Validation in Custom SMS API Client Affected: before 4.10.16 |
| CVE-2025-27095 | 4.3 | Mar 31 | JumpServer has a Kubernetes Token Leak Vulnerability Affected: before 3.10.18; 4.0.0 before 4.8.0 |
Showing 10