VendorsAruba Networksedgeconnect_sd-wan_orchestratorall versions
Vulnerabilities

Aruba Networks EdgeConnect SD-WAN Orchestrator

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

67CVEs
CVE-2025-37181
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2025-37182
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2025-37183
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2026-76692
Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
7.1EPSS 0.003
CVE-2026-76693
Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
7.0EPSS 0.004
CVE-2026-76694
Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
6.6EPSS 0.005
CVE-2026-76698
Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
6.5EPSS 0.045
CVE-2023-37435
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
6.5EPSS 0.008
CVE-2023-37436
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
6.5EPSS 0.008
CVE-2023-37437
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
6.5EPSS 0.008
CVE-2023-37438
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
6.5EPSS 0.008
CVE-2026-76695
Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
6.5EPSS 0.005
CVE-2026-76697
Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface
Published 2026-09-15 · Analyzed
6.5EPSS 0.005
CVE-2026-76696
Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
6.5EPSS 0.003
CVE-2026-76699
Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
6.4EPSS 0.002
CVE-2023-37439
Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface
Published 2023-08-22 · Modified
6.1EPSS 0.005
CVE-2024-22444
A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.
Published 2024-07-24 · Modified
6.1EPSS 0.003
CVE-2026-76700
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
5.9EPSS 0.005
CVE-2026-76701
Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
5.9EPSS 0.004
CVE-2026-76702
Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
5.8EPSS 0.001
CVE-2023-37440
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure
Published 2023-08-22 · Modified
5.5EPSS 0.006
CVE-2026-76705
Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
5.5EPSS 0.005
CVE-2026-76703
Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service
Published 2026-09-15 · Analyzed
5.5EPSS 0.004
CVE-2026-76704
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-09-15 · Analyzed
5.5EPSS 0.003
CVE-2025-37185
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2026-01-14 · Analyzed
5.5EPSS 0.003
CVE-2026-76706
Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data
Published 2026-09-15 · Analyzed
5.3EPSS 0.004
CVE-2026-76707
Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
4.3EPSS 0.002
← Prev2 / 2