VendorsAruba Networksedgeconnect_sd-wan_orchestrator9.6.0
Vulnerabilities

Aruba Networks EdgeConnect SD-WAN Orchestrator 9.6.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-37184
Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention
Published 2026-01-14 · Modified
9.8EPSS 0.007
CVE-2025-37181
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2025-37182
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2025-37183
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2026-01-14 · Analyzed
7.2EPSS 0.005
CVE-2025-37185
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2026-01-14 · Analyzed
5.5EPSS 0.003