Aruba Networks EdgeConnect Enterprise Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect Enterprise Orchestrator is a centralized SD-WAN management solution from Aruba Networks, Inc. It provides optimization, management, automation, and real-time visibility and monitoring features for enterprise users. A security vulnerability exists in Aruba Networks...

CVE-2022-44534

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system...

CVE-2022-44534

The Aruba EdgeConnect Enterprise Orchestrator web-based management interface is affected. Remote authenticated users can execute arbitrary commands on the underlying host with root privileges, leading to full system compromise for affected versions (9.2.1.40179 and below; 9.1.4.40436 and below; 9...

CVE-2022-43529

The CVE-2022-43529 issue affects Aruba EdgeConnect Enterprise Orchestrator web-based management interface, enabling an attacker to persist a session after a password reset or similar session-clearing event and operate with the original session’s permissions. Affected versions include Orchestrator...

CVE-2022-43528

Summary: CVE-2022-43528 affects Aruba EdgeConnect Enterprise Orchestrator (on‑premises, SaaS, SP, and Global Tenant Orchestrators). The issue is an MFA bypass where an attacker can log in with only a username and password under certain configurations, bypassing multi‑factor authentication. Vulner...

CVE-2022-43528

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code. Successful exploitation allows an attacker to login using only a username and password and successfully bypass MFA requirements in Aruba EdgeConne...

CVE-2022-43527

CVE-2022-43527 concerns multiple XSS vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator. Affected are on-premises and cloud variants of Aruba EdgeConnect Enterprise Orchestrator and related deployments, with vulnerable versions including 9.2.1.40179...

CVE-2022-43526

CVE-2022-43526 – Aruba EdgeConnect Enterprise Orchestrator : Multiple vulnerabilities in the web-based management interface allow a reflected XSS attack. Affected versions: 9.2.1.40179 and below; 9.1.4.40436 and below; 9.0.7.40110 and below; 8.10.23.40015 and below. Impact is arbitrary script exe...

CVE-2022-43525

The Aruba EdgeConnect Enterprise Orchestrator web-based management interface contains a reflected XSS vulnerability affecting versions 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, and 8.10.23.40015 and below. An attacker could remotely exploit this flaw to inject script co...

CVE-2022-43524

Summary (CVE-2022-43524): Aruba EdgeConnect Enterprise Orchestrator web UI vulnerable to stored XSS via authenticated access. Affects: Orchestrator on-premises/Service/SP/Global Tenant; versions 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, 8.10.23.40015 and below. Cause: s...

CVE-2022-43523

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43523

Summary: CVE-2022-43523 affects Aruba EdgeConnect Enterprise Orchestrator. Multiple SQL injection vulnerabilities in the web-based management interface could allow an authenticated remote attacker to read/modify data in the underlying database and potentially compromise the Orchestrator host. Aff...

CVE-2022-43522

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43522

CVE-2022-43522 : Aruba EdgeConnect Enterprise Orchestrator contains multiple SQL injection vulnerabilities in the web-based management interface that require authentication. Impact described: attacker could obtain/modify data in the underlying database and potentially compromise the host. Affecte...

CVE-2022-43522

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43521

Aruba EdgeConnect Enterprise Orchestrator exposes an authenticated SQL injection vulnerability in its web-based management interface. Affected versions include 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, and 8.10.23.40015 and below. The issue could allow an attacker with ...

CVE-2022-43520

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43520

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43520

Aruba EdgeConnect Enterprise Orchestrator exposes a SQL injection vulnerability in its web-based management interface. An authenticated remote attacker could read or modify data in the underlying database and potentially compromise the host. Affected versions include 9.2.1.40179 and below, 9.1.4....

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...