h-mdm kayıtları
h-mdm üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-47315İstismar yok | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret.h-mdm · headwind mdm · CWE-798 | Yüksek8,8 | — | %0,7 | 22 Kas 2023 |
26İzleyin | CVE-2025-43720İstismar yok | Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.h-mdm · headwind mdm · CWE-862 | Orta6,5 | — | %0,4 | 21 Tem 2025 |
26İzleyin | CVE-2023-47312İstismar yok | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries.h-mdm · headwind mdm · CWE-312 | Orta6,5 | — | %0,3 | 22 Kas 2023 |
21İzleyin | CVE-2023-47313İstismar yok | Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.h-mdm · headwind mdm · CWE-22 | Orta5,4 | — | %0,7 | 22 Kas 2023 |
21İzleyin | CVE-2023-47316İstismar yok | Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control.h-mdm · headwind mdm · CWE-639 | Orta5,4 | — | %0,4 | 22 Kas 2023 |
21İzleyin | CVE-2023-47314İstismar yok | Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS).h-mdm · headwind mdm · CWE-79 | Orta5,4 | — | %0,4 | 22 Kas 2023 |
- CVE-2023-4731535İzleyin
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret.
YüksekCVSS 8,8İstismar yokEPSS %0h-mdm · headwind mdm22 Kas 2023
- CVE-2025-4372026İzleyin
Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.
OrtaCVSS 6,5İstismar yokEPSS %0h-mdm · headwind mdm21 Tem 2025
- CVE-2023-4731226İzleyin
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries.
OrtaCVSS 6,5İstismar yokEPSS %0h-mdm · headwind mdm22 Kas 2023
- CVE-2023-4731321İzleyin
Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.
OrtaCVSS 5,4İstismar yokEPSS %0h-mdm · headwind mdm22 Kas 2023
- CVE-2023-4731621İzleyin
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control.
OrtaCVSS 5,4İstismar yokEPSS %0h-mdm · headwind mdm22 Kas 2023
- CVE-2023-4731421İzleyin
Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS).
OrtaCVSS 5,4İstismar yokEPSS %0h-mdm · headwind mdm22 Kas 2023