fit2cloud jumpserver

Name: fit2cloud jumpserver
Brand: fit2cloud

productUS

cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical4high7medium0low

updated 2026-10-24

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-42442US	medium5.3	63.0% (99th)	Exploit	3.5.5	2023-09-15	2 versions
CVE-2023-42820US	high8.2	6.30% (94th)	Exploit	2.28.19	2023-09-27	2 versions
CVE-2023-42819US	high8.8	2.21% (83rd)	Exploit	3.6.5	2023-09-27	3.0.0 → 3.6.5
CVE-2024-29201US	critical9.9	5.99% (93rd)	—	3.10.7	2024-03-29	3.0.0 → 3.10.7
CVE-2024-29202US	critical9.9	5.94% (93rd)	—	3.10.7	2024-03-29	3.0.0 → 3.10.7
CVE-2023-43651US	critical9.9	2.11% (82nd)	—	2.28.20	2023-09-27	2 versions
CVE-2023-48193US	critical9.8	1.98% (80th)	—	no fix	2023-11-28	= 3.8.0
CVE-2024-40629US	critical9.8	1.27% (70th)	—	3.10.12	2024-07-18	3.0.0 → 3.10.12
CVE-2024-24763US	medium6.1	1.06% (64th)	—	3.10.0	2024-02-20	< 3.10.0
CVE-2024-40628US	critical9.1	0.86% (58th)	—	3.10.12	2024-07-18	3.0.0 → 3.10.12
CVE-2023-28110US	critical9.9	0.85% (58th)	—	2.28.8	2023-03-16	< 2.28.8
CVE-2023-43652US	critical9.1OT elevated	0.81% (57th)	—	2.28.20	2023-09-27	2 versions
CVE-2023-46123US	medium5.3	0.70% (53rd)	—	3.8.0	2023-10-25	< 3.8.0
CVE-2023-42818US	critical9.8	0.68% (52nd)	—	3.6.5	2023-09-27	2 versions
CVE-2023-43650US	high7.4	0.60% (48th)	—	3.7.1	2023-09-27	2 versions
CVE-2026-31864US	—	0.54% (44th)	—	4.10.16	2026-03-13	2 versions
CVE-2025-62712US	high8.1OT elevated	0.50% (42nd)	—	3.10.20	2025-10-30	2 versions
CVE-2025-58044US	medium6.1	0.49% (41st)	—	4.10.5	2025-12-01	2 versions
CVE-2025-27095US	—	0.33% (24th)	—	4.8.0	2025-03-31	2 versions
CVE-2023-46138US	medium5.3	0.32% (23rd)	—	3.8.0	2023-10-31	< 3.8.0
CVE-2024-29020US	medium5.3	0.29% (21st)	—	3.10.6	2024-03-29	3.0.0 → 3.10.6
CVE-2025-62795US	—OT elevated	0.29% (20th)	—	4.10.12	2025-10-30	2 versions
CVE-2024-29024US	medium5.3	0.24% (14th)	—	3.10.6	2024-03-29	3.0.0 → 3.10.6
CVE-2026-31798US	—	0.13% (2nd)	—	4.10.16	2026-03-13	< 4.10.16

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-640Weak Password Recovery Mechanism for Forgotten Password2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan