CVE-2023-47316: H-Mdm Headwind Mdm

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.

Affected products

• H-Mdm Headwind Mdm: version 5.22.1 only

Published 2023-11-22. Last modified 2026-06-17.