CVE-2025-37185

This CVE (CVE-2025-37185) affects the EdgeConnect SD-WAN Orchestrator web administration interface. The vulnerability is described as authenticated stored XSS that could allow an attacker to execute arbitrary script code in the victim’s browser within the affected interface, enabling unauthorized...

The vulnerability of the web interface of the Cisco Crosswork Network Services Orchestrator software allows a hacker to carry out phishing attacks.

The vulnerability of the Cisco Crosswork Network Services Orchestrator software’s web interface relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks using a specially created malicious link...

The vulnerability of the API component of the Cisco ACI Multi-Site Orchestrator (MSO) allows a attacker to modify the device’s configuration.

The vulnerability of the API component of the Cisco ACI Multi-Site Orchestrator MSO is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify the device’s configuration remotely...

Silver Peak Systems EdgeConnect Software Operating System Command Injection Vulnerability

Silver Peak Systems EdgeConnect Software ECOS is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides features such as path conditioning, application classification, routing, and virtual WAN overlays. Silver Peak Systems EdgeConnect...

PT-2020-6945 · Silver Peak · Silver Peak Unity Ecostm

Name of the Vulnerable Software and Affected Versions: Silver Peak Unity ECOSTM ECOS versions prior to 8.1.9.15 Silver Peak Unity ECOSTM ECOS versions prior to 8.3.0.8 Silver Peak Unity ECOSTM ECOS versions prior to 8.3.1.2 Silver Peak Unity ECOSTM ECOS versions prior to 8.3.2.0 Silver Peak Unity...

PT-2020-13067 · Silver Peak · Orchestrator +1

Name of the Vulnerable Software and Affected Versions: Silver Peak Unity ECOSTM ECOS appliance software versions prior to 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0 Description: The configuration backup/restore function in the software directly incorporates the user-controlled conf...