CVE-2021-32017
Critical
Published: 03 August 2021
Published
03 August 2021
Modified
30 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.0023
46.3th percentile
Risk Priority
20
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-32017 is a critical-severity an unspecified weakness vulnerability in Jump-Technology Asset Management. Its CVSS base score is 9.9 (Critical).
Operationally, ranked at the 46.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-18884
Vulnerability details
An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and…
more
files.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
jump-technology
asset management
3.6.0.04.009-2487
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.