jumpserver Latest Vulnerabilities
Latest vulnerabilities published by jumpserver
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Open Redirect Vulnerability in JumpServer Bastion Host by JumpServer
CVE-2025-58044JumpserverJumpserver5.5MEDIUMUnauthorized Access in JumpServer Bastion Host by Low-Privileged Users
CVE-2025-62795JumpserverJumpserver7.1HIGHUnauthorized Access Vulnerability in JumpServer by JumpServer
CVE-2025-62712JumpserverJumpserver9.6CRITICALVulnerability in JumpServer's Kubernetes Session Feature Allows Unauthorized Access
CVE-2025-27095JumpserverJumpserver4.3MEDIUMSecrets Disclosure Vulnerability in JumpServer PAM Tool
CVE-2024-40628JumpserverJumpserver9.1CRITICALAnsible Playbook Exploit Allows Remote Code Execution in Celery Container
CVE-2024-40629JumpserverJumpserver9.8CRITICALJinja2 Template Injection Vulnerability Affects JumpServer's Ansible
CVE-2024-29202JumpserverJumpserverEPSS 81%📰9.9CRITICALArbitrary Code Execution Vulnerability in JumpServer's Ansible Could Lead to Sensitive Information Theft or Database Manipulation
CVE-2024-29201JumpserverJumpserver👾🟡EPSS 68%📰9.9CRITICALSensitive Information Disclosure Vulnerability in JumpServer
CVE-2024-29020JumpserverJumpserver5.3MEDIUMJumpServer Bastion Host Vulnerable to IDOR Attacks
CVE-2024-29024JumpserverJumpserver5.3MEDIUMJumpServer vulnerability affects phishing and cross-site scripting attacks
CVE-2024-24763jumpserverjumpserverEPSS 26%6.1MEDIUMJumpServer default admin user email leak password reset
CVE-2023-46138JumpserverJumpserver3.7LOWjumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values
CVE-2023-46123JumpserverJumpserver5.3MEDIUMSSH public key login without private key challenge if mfa is enabled in jumpserver
CVE-2023-42818JumpserverJumpserver9.8CRITICALRemote code execution on the host system via MongoDB shell in jumpserver
CVE-2023-43651JumpserverJumpserverEPSS 13%9.9CRITICALNon-MFA account takeover via brute-force attack on weak password reset code in jumpserver
CVE-2023-43650JumpserverJumpserver7.4HIGHNon-MFA account takeover via using only SSH public key to login in jumpserver
CVE-2023-43652JumpserverJumpserver9.1CRITICALPath traversal in Jumpserver
CVE-2023-42819JumpserverJumpserver👾🟡EPSS 37%8.9HIGHRandom seed leakage in Jumpserver
CVE-2023-42820JumpserverJumpserver👾🟡EPSS 62%7HIGHJumpServer session replays download without authentication
CVE-2023-42442jumpserverjumpserver👾🟡EPSS 87%5.3MEDIUMJumpServer Koko vulnerable to Command Injection for Kubernetes Connection
CVE-2023-28110JumpserverJumpserver5.7MEDIUMAccess Control Issue in Jumpserver by Jumpserver
CVE-2021-3169JumpserverJumpserver9.8CRITICAL