Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ArubanetworksEdgeconnect Sd-wan Orchestrator

24 matches found

cve
cve•added 2024/07/24 3:15 p.m.•64 views

CVE-2024-22443

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the under...

8.8CVSS7.2AI score0.00943EPSS
cve
cve•added 2023/08/22 7:16 p.m.•48 views

CVE-2023-37437

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

6.5CVSS6.8AI score0.00161EPSS
cve
cve•added 2024/07/24 4:15 p.m.•48 views

CVE-2024-22444

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a vic...

6.1CVSS6AI score0.00077EPSS
cve
cve•added 2024/07/24 9:15 p.m.•45 views

CVE-2024-41136

An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

8.8CVSS7AI score0.00161EPSS
cve
cve•added 2023/08/22 7:16 p.m.•41 views

CVE-2023-37434

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00168EPSS
cve
cve•added 2024/07/24 3:15 p.m.•41 views

CVE-2024-41914

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary s...

9CVSS5.8AI score0.00081EPSS
cve
cve•added 2023/08/22 7:16 p.m.•39 views

CVE-2023-37421

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary s...

8.1CVSS6.3AI score0.00116EPSS
cve
cve•added 2023/08/22 7:16 p.m.•37 views

CVE-2023-37431

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00109EPSS
cve
cve•added 2023/08/22 7:16 p.m.•36 views

CVE-2023-37436

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

6.5CVSS6.8AI score0.00158EPSS
cve
cve•added 2023/08/22 7:16 p.m.•34 views

CVE-2023-37425

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary...

8CVSS6.5AI score0.00423EPSS
cve
cve•added 2023/08/22 7:16 p.m.•34 views

CVE-2023-37429

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00109EPSS
cve
cve•added 2023/08/22 7:16 p.m.•33 views

CVE-2023-37424

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability ...

8.1CVSS8.3AI score0.01925EPSS
cve
cve•added 2023/08/22 7:16 p.m.•32 views

CVE-2023-37440

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeCo...

5.5CVSS5.2AI score0.00323EPSS
cve
cve•added 2023/08/22 7:16 p.m.•31 views

CVE-2023-37422

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary s...

8.1CVSS6.3AI score0.00116EPSS
cve
cve•added 2023/08/22 7:16 p.m.•31 views

CVE-2023-37428

A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to ...

7.2CVSS7.1AI score0.01388EPSS
cve
cve•added 2023/08/22 7:16 p.m.•31 views

CVE-2023-37430

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00109EPSS
cve
cve•added 2023/08/22 7:16 p.m.•31 views

CVE-2023-37433

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00109EPSS
cve
cve•added 2023/08/22 7:16 p.m.•30 views

CVE-2023-37427

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on the under...

7.2CVSS7.3AI score0.00582EPSS
cve
cve•added 2023/08/22 7:16 p.m.•30 views

CVE-2023-37432

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

8.1CVSS7.3AI score0.00109EPSS
cve
cve•added 2023/08/22 7:16 p.m.•30 views

CVE-2023-37439

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

6.1CVSS6.6AI score0.00378EPSS
cve
cve•added 2023/08/22 7:16 p.m.•27 views

CVE-2023-37423

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary s...

8.1CVSS6.3AI score0.00116EPSS
cve
cve•added 2023/08/22 7:16 p.m.•26 views

CVE-2023-37438

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

6.5CVSS6.8AI score0.00156EPSS
cve
cve•added 2023/08/22 7:16 p.m.•25 views

CVE-2023-37435

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify ...

6.5CVSS6.8AI score0.00158EPSS
cve
cve•added 2023/08/22 7:16 p.m.•22 views

CVE-2023-37426

EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations. This vulnerability could allow an attacker to spoof the SSH host signature and thereby masquerade as a legitimate Orchestratorhost.

7.5CVSS7.4AI score0.00247EPSS