CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

Open redirect

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

The CVE refers to Jamf Pro before version 10.30.1 with an unvalidated/unauthorized URL redirect vulnerability in on‑premises deployments. The underlying issue is an unvalidated URL in Jamf Pro that can cause a user to be redirected to an arbitrary, potentially malicious URL when a crafted link is...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

PT-2021-20806

Name of the Vulnerable Software and Affected Versions: Jamf Pro versions prior to 10.30.1 Description: The issue allows for an unvalidated URL redirect, affecting Jamf Pro customers with on-premises environments. An attacker can craft a URL that appears legitimate but redirects users to an...

JAMF Jamf Pro 输入验证错误漏洞

JAMF Jamf Pro is an Apple device management solution from Jamf America JAMF. An input validation error vulnerability exists in versions of Jamf Pro prior to 10.30.1 that allows unauthenticated URL redirection to affect Jamf Pro customers in locally hosted environments...

CVE-2021-35037: URL Redirection to Untrusted Site

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

Jamf Pro Cross-Site Scripting Vulnerability

Jamf Pro is comprehensive enterprise management software for the Apple platform that simplifies IT management for Mac, iPad, iPhone and Apple TV. A cross-site scripting vulnerability exists in "Inventory History" in Jamf Pro versions prior to 10.28.0. No details of the vulnerability are available...

CVE-2021-30125

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

CVE-2021-30125

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

Cross site scripting

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

CVE-2021-30125

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

CVE-2021-30125

Summary of findings (CVE-2021-30125): Jamf Pro versions prior to 10.28.0 are affected by a cross-site scripting (XSS) vulnerability in the Inventory History feature (also referenced as PI-009376). The issue is described across multiple sources as an XSS in Inventory History, with no detailed expl...

CVE-2021-30125

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

Jamf Pro 跨站脚本漏洞

Jamf Pro is comprehensive enterprise management software for the Apple platform that simplifies IT management for Mac, iPad, iPhone and Apple TV. A cross-site scripting vulnerability exists in "Inventory History" in Jamf Pro versions prior to 10.28.0. No details of the vulnerability are available...

CVE-2021-30125: Improper Neutralization of Input During Web Page Generation

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

PT-2021-18616

Name of the Vulnerable Software and Affected Versions Jamf Pro versions prior to 10.28.0 Description The issue is related to a security problem that allows XSS in the context of inventory history. Recommendations For versions prior to 10.28.0, update to version 10.28.0 or later to resolve the iss...

Jamf Pro License Issue Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. Jamf Pro is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An attacker could exploit this vulnerability to...