Jamf Pro Server: Security Issues
Jamf provides the CVE-ID for security issues with high or critical severity when possible.
[PI136944] Jamf Pro 11.19.0 includes Tomcat 10.1.42, effectively resolving a known security vulnerability in a third-party library (CVE-2025-48976). This resolved issue is also included in Jamf Pro 11.18.1.
Jamf Pro Server
[PI102946] Fixed: Advanced searches may not load in the Jamf Pro interface.
[PI104182] [PI-005904] Fixed: Jamf Pro fails to remove all inventory information from a re-imaged computer when re-enrolling the computer with Jamf Pro.
[PI107034] [PI-003054] Fixed: Policies that are configured to be available in Self Service are not displayed in the Policies category in computer inventory information after assigning a user to the computer.
[PI110520] Fixed: The MDM profiles for a small percentage of computers and mobile devices are not renewed automatically 180 days prior to their expiration when the related setting is enabled in MDM Profile Settings.
[PI110678] Fixed: Mobile devices originally enrolled through the legacy URL (e.g., https://[your-server].jamfcloud.com:8443) may fail to renew their MDM profiles, resulting in a "Mobile Device Management is already installed" error message.
[PI112487] Fixed: When LDAP is integrated with Jamf Pro, an "Unparseable Date Exception" error is logged during device enrollment and inventory submission when mobile device extension attributes have values that cannot be converted to epoch time date format.
[PI117206] Fixed: Selecting Cancel all pending commands, except the following to cancel selected mass actions may unintentionally cancel Renew MDM Profile commands.
[PI122412] Fixed: If an extension attribute produces a null value, configuration profiles with a variable (e.g.,
$COMPUTERNAME) will not deploy.[PI134143] Fixed: In environments with a significant amount of data in the scep_challenges table of the Jamf Pro database, Jamf Pro fails to start after upgrading to 11.13.0 or later.
[PI134316] Fixed: Jamf Pro unexpectedly modifies configuration profiles with a SCEP payload after upgrading to version 11.14.0 or later.
[PI135117] Fixed: Empty records can accumulate in the self_service_notifications table through regular Jamf Pro usage or in conjunction with related issues, causing database bloat and performance degradation.
[PI135195] Fixed: The Jamf Pro interface displays a false error on the Options tab of configuration profiles with a SCEP payload when attempting to save.
[PI136401] Fixed: The Add Note button cannot be clicked when using Safari to add a note to the history of a configuration profile.