{"cves":{"cve":{"cveNumber":"CVE-2026-14903","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14903"}},"description":"Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\n\nIvanti Xtraction存在路径遍历漏洞，该漏洞源于对文件路径的访问控制未能正确验证，攻击者可利用该漏洞读取web根目录外的任意文件。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?language=en_US","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37877","openTime":"2026-09-20","patchDescription":"Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\r\n\r\nIvanti Xtraction存在路径遍历漏洞，该漏洞源于对文件路径的访问控制未能正确验证，攻击者可利用该漏洞读取web根目录外的任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Ivanti Xtraction路径遍历漏洞的补丁","products":{"product":"Ivanti Xtraction <2026.2.1"},"referenceLink":"https://nvd.nist.gov/vuln/detail/cve-2026-14903","serverity":"中","submitTime":"2026-07-15","title":"Ivanti Xtraction路径遍历漏洞"}