Vulnerabilities > Fit2Cloud > Jumpserver

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-42820 Unspecified vulnerability in Fit2Cloud Jumpserver
JumpServer is an open source bastion host.
network
low complexity
fit2cloud
8.2
2023-09-15 CVE-2023-42442 Improper Authentication vulnerability in Fit2Cloud Jumpserver
JumpServer is an open source bastion host and a professional operation and maintenance security audit system.
network
low complexity
fit2cloud CWE-287
5.3
2023-03-16 CVE-2023-28110 Command Injection vulnerability in Fit2Cloud Jumpserver and Koko
Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service.
network
low complexity
fit2cloud CWE-77
critical
9.9