H-mdm

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

H-mdm records in CISA KEV

No H-mdm vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Headwind Mdm · all components

TI-2023-25603 CVE-2023-47315 · GHSA-f435-4r8x-qw93

LOW 39

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00784 Published 2023-11-22 No fix listed CWE-798

TI-2025-28309 CVE-2025-43720 · GHSA-238c-73w3-x9m4

LOW 29

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00429 Published 2025-07-21 No fix listed CWE-862

TI-2023-25600 CVE-2023-47312 · GHSA-qgx3-64xj-x44j

LOW 29

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00396 Published 2023-11-22 No fix listed CWE-312

TI-2023-25601 CVE-2023-47313 · GHSA-93xx-m8fp-hhph

LOW 26

Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00786 Published 2023-11-22 No fix listed CWE-22

TI-2023-25604 CVE-2023-47316 · GHSA-rpgw-w8c6-24xw

LOW 25

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00419 Published 2023-11-22 No fix listed CWE-639

TI-2023-25602 CVE-2023-47314 · GHSA-jhx8-j2x2-g9ch

LOW 25

Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00414 Published 2023-11-22 No fix listed CWE-79