Vulnerabilities

TI-2025-28309 CVE-2025-43720 · GHSA-238c-73w3-x9m4

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.

LOW 29

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00429 Published 2025-07-21 No fix listed CWE-862

TI-2023-25604 CVE-2023-47316 · GHSA-rpgw-w8c6-24xw

LOW 25

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00419 Published 2023-11-22 No fix listed CWE-639

TI-2023-25603 CVE-2023-47315 · GHSA-f435-4r8x-qw93

LOW 39

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00784 Published 2023-11-22 No fix listed CWE-798

TI-2023-25602 CVE-2023-47314 · GHSA-jhx8-j2x2-g9ch

LOW 25

Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00414 Published 2023-11-22 No fix listed CWE-79

TI-2023-25601 CVE-2023-47313 · GHSA-93xx-m8fp-hhph

LOW 26

Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00786 Published 2023-11-22 No fix listed CWE-22

TI-2023-25600 CVE-2023-47312 · GHSA-qgx3-64xj-x44j

LOW 29

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00396 Published 2023-11-22 No fix listed CWE-312