CVE-2022-44534

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system...

CVE-2022-44534

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system...

CVE-2022-44534

The Aruba EdgeConnect Enterprise Orchestrator web-based management interface is affected. Remote authenticated users can execute arbitrary commands on the underlying host with root privileges, leading to full system compromise for affected versions (9.2.1.40179 and below; 9.1.4.40436 and below; 9...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...

CVE-2022-43529

The CVE-2022-43529 issue affects Aruba EdgeConnect Enterprise Orchestrator web-based management interface, enabling an attacker to persist a session after a password reset or similar session-clearing event and operate with the original session’s permissions. Affected versions include Orchestrator...

CVE-2022-43528

Summary: CVE-2022-43528 affects Aruba EdgeConnect Enterprise Orchestrator (on‑premises, SaaS, SP, and Global Tenant Orchestrators). The issue is an MFA bypass where an attacker can log in with only a username and password under certain configurations, bypassing multi‑factor authentication. Vulner...

CVE-2022-43528

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code. Successful exploitation allows an attacker to login using only a username and password and successfully bypass MFA requirements in Aruba EdgeConne...

CVE-2022-43528

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code. Successful exploitation allows an attacker to login using only a username and password and successfully bypass MFA requirements in Aruba EdgeConne...

CVE-2022-43527

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2022-43527

CVE-2022-43527 concerns multiple XSS vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator. Affected are on-premises and cloud variants of Aruba EdgeConnect Enterprise Orchestrator and related deployments, with vulnerable versions including 9.2.1.40179...

CVE-2022-43527

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2022-43526

CVE-2022-43526 – Aruba EdgeConnect Enterprise Orchestrator : Multiple vulnerabilities in the web-based management interface allow a reflected XSS attack. Affected versions: 9.2.1.40179 and below; 9.1.4.40436 and below; 9.0.7.40110 and below; 8.10.23.40015 and below. Impact is arbitrary script exe...

CVE-2022-43526

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2022-43526

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2022-43525

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

CVE-2022-43525

The Aruba EdgeConnect Enterprise Orchestrator web-based management interface contains a reflected XSS vulnerability affecting versions 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, and 8.10.23.40015 and below. An attacker could remotely exploit this flaw to inject script co...

CVE-2022-43524

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute...

CVE-2022-43524

Summary (CVE-2022-43524): Aruba EdgeConnect Enterprise Orchestrator web UI vulnerable to stored XSS via authenticated access. Affects: Orchestrator on-premises/Service/SP/Global Tenant; versions 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, 8.10.23.40015 and below. Cause: s...

CVE-2022-43524

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute...