{"cves":{"cve":{"cveNumber":"CVE-2026-14902","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14902"}},"description":"Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\n\nIvanti Xtraction存在重定向漏洞，该漏洞源于程序未能正确验证URL重定向的目标地址，攻击者可利用该漏洞将用户重定向到任意外部URL。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?language=en_US","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37878","openTime":"2026-09-20","patchDescription":"Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\r\n\r\nIvanti Xtraction存在重定向漏洞，该漏洞源于程序未能正确验证URL重定向的目标地址，攻击者可利用该漏洞将用户重定向到任意外部URL。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Ivanti Xtraction重定向漏洞的补丁","products":{"product":"Ivanti Xtraction <2026.2.1"},"referenceLink":"https://nvd.nist.gov/vuln/detail/cve-2026-14902","serverity":"中","submitTime":"2026-07-15","title":"Ivanti Xtraction重定向漏洞"}