Critical severity9.8NVD Advisory· Published Jan 8, 2020· Updated Jun 17, 2026

CVE-2019-17076

Description

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), and/or deletion of files on the Jamf Pro server.

Affected products

Jamf/Jamf
cpe:2.3:a:jamf:jamf:*:*:*:*:pro:*:*:*
Range: >=9.4,<=9.101.4
Jamf/Jamf Prodescription
Jamf/Prollm-fuzzy
Range: <10.15.1

Patches

Vulnerability mechanics

References

resources.jamf.com/documents/products/security-disclosure-notice-jamf-pro-10.15.1.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000