VendorsAruba Networksedgeconnect_sd-wan_orchestrator9.3.0
Vulnerabilities

Aruba Networks EdgeConnect SD-WAN Orchestrator 9.3.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2024-41136
Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface
Published 2024-07-24 · Modified
8.8EPSS 0.009
CVE-2023-37434
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.010
CVE-2023-37424
Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.009
CVE-2023-37429
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37430
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37431
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37432
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37433
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37421
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2023-37422
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2023-37423
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2023-37425
Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
8.0EPSS 0.005
CVE-2023-37426
Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator
Published 2023-08-22 · Modified
7.5EPSS 0.005
CVE-2023-37427
Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
7.2EPSS 0.013
CVE-2023-37428
Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
7.2EPSS 0.011
CVE-2023-37439
Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface
Published 2023-08-22 · Modified
6.1EPSS 0.005