Lucene search
+L

4 matches found

nvd
nvd
added 2023/08/22 7:16 p.m.18 views

CVE-2023-37439

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...

6.1CVSS6.6AI score0.00384EPSS
Exploits0References1
cve
cve
added 2023/08/22 6:9 p.m.45 views

CVE-2023-37439

CVE-2023-37439 describes SQL injection vulnerabilities in the EdgeConnect SD-WAN Orchestrator web management interface. The issue permits an authenticated remote attacker to exploit SQL injection to obtain and modify data in the underlying database, potentially leading to exposure and corruption ...

6.1CVSS6.6AI score0.00384EPSS
Exploits0References1Affected Software1
vulnrichment
vulnrichment
added 2023/08/22 6:9 p.m.11 views

CVE-2023-37439 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...

6.1CVSS7.2AI score0.00384EPSS
Exploits0References1
cvelist
cvelist
added 2023/08/22 6:9 p.m.19 views

CVE-2023-37439 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...

6.1CVSS6.8AI score0.00384EPSS
Exploits0References1
Rows per page
Query Builder