Lucene search

[email protected]NVD:CVE-2024-22444

HistoryJul 24, 2024 - 4:15 p.m.

CVE-2024-22444

2024-07-2416:15:06

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

edgeconnect sd-wan orchestrator

web interface

remote

xss

attack

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.5%

JSON

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.

Affected configurations

Nvd

Node

arubanetworksedgeconnect_sd-wan_orchestratorRange9.1.0–9.1.9

arubanetworksedgeconnect_sd-wan_orchestratorRange9.2.0–9.2.9

arubanetworksedgeconnect_sd-wan_orchestratorRange9.3.0–9.3.3

arubanetworksedgeconnect_sd-wan_orchestratorRange9.4.0–9.4.2

VendorProductVersionCPE
arubanetworksedgeconnect_sd-wan_orchestrator*cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arubanetworks	edgeconnect_sd-wan_orchestrator	*	cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator::::::::

References

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04672en_us&docLocale=en_US

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.5%

JSON

Related for NVD:CVE-2024-22444

cve1 vulnrichment1 cvelist1