H MDM's vulnerability profile concentrates in a single mobile device management product, Headwind MDM, which operates in the niche enterprise mobility space where deployment scope is typically limited compared to mainstream platforms. The observed disclosures reflect the product's administrative and device-control function rather than a broad or recurring pattern of weakness classes. Current CVE counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by H Mdm over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-47315HIGH Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. | Nov 22, 2023 | 8.8 | 24 | NO | NO |
CVE-2025-43720MEDIUM Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requ | Jul 21, 2025 | 6.5 | 19 | NO | NO |
CVE-2023-47312MEDIUM Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries. | Nov 22, 2023 | 6.5 | 19 | NO | NO |
CVE-2023-47316MEDIUM Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and thei | Nov 22, 2023 | 5.4 | 17 | NO | NO |
CVE-2023-47314MEDIUM Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS). The file upload function allows APK and arbitrary files to be uploaded. By exploiting this issue, attacke | Nov 22, 2023 | 5.4 | 17 | NO | NO |
CVE-2023-47313MEDIUM Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. The application uses an API call to move the uploaded temporary file to the file directory during the file uploa | Nov 22, 2023 | 5.4 | 16 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by H Mdm.
Media articles that mention a CVE ID that affects a product developed by H Mdm — matched by CVE ID, not by vendor name.