cnvd-2026-37878

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-14902",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-14902"
    }
  },
  "description": "Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\n\nIvanti Xtraction存在重定向漏洞，该漏洞源于程序未能正确验证URL重定向的目标地址，攻击者可利用该漏洞将用户重定向到任意外部URL。",
  "formalWay": "目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?language=en_US",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-37878",
  "openTime": "2026-09-20",
  "patchDescription": "Ivanti Xtraction是‌Ivanti旗下一款面向企业级的统一IT数据可视化与商业智能（BI）平台。\r\n\r\nIvanti Xtraction存在重定向漏洞，该漏洞源于程序未能正确验证URL重定向的目标地址，攻击者可利用该漏洞将用户重定向到任意外部URL。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。",
  "patchName": "Ivanti Xtraction重定向漏洞的补丁",
  "products": {
    "product": "Ivanti Xtraction <2026.2.1"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/cve-2026-14902",
  "serverity": "中",
  "submitTime": "2026-07-15",
  "title": "Ivanti Xtraction重定向漏洞"
}