Yesterday a CVE was released indicating a high-risk vulnerability within most browsers - CVE-2023-4863. During my creating a report to check to make sure my Edge versions were getting patched (needed to filter out active workstations which Patch Management can't do) I discovered that Jamf inventory reporting is reporting the wrong version string.
In tracking the Microsoft Edge version, Jamf inventory is pulling the edge version from CFBundleVersion while Patch Management and the app itself displays from CFBundleShortVersionString, affecting the ability to make effective smart groups to track patching. I've submitted a ticket to Jamf and it's been sent as a FR or a PI, but if you needed to follow along on your own compliance, be aware that your smart group won't ever populate correctly until it's corrected.
Also here's a quick EA to create correct smart groups if you needed it.
#!/bin/sh
# Edge version - CFBundleShortVersionString.sh
#
# Created by Ed C on 9/28/23.
#
###############
# Script to get the CFBundleShortVersionString from the Microsoft Edge info.plist file
###############
EdgeVer=$(/usr/bin/defaults read /Applications/Microsoft\ Edge.app/Contents/Info.plist CFBundleShortVersionString || echo "Microsoft Edge not installed")
echo "<result>$EdgeVer</result>"
exit 0
