ES
Product
Edgeconnect Sd-wan Orchestrator
71
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 37Medium 26Low 0
Watch
Add Edgeconnect Sd-wan Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76694 | 6.6 | Sep 15 | Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76698 | 6.5 | Sep 15 | Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76697 | 6.5 | Sep 15 | Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76696 | 6.5 | Sep 15 | Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76695 | 6.5 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2023-37438 | 6.5 | Aug 22 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface Affected: before 9.3.1 |
| CVE-2023-37437 | 6.5 | Aug 22 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface Affected: before 9.3.1 |
| CVE-2023-37436 | 6.5 | Aug 22 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface Affected: before 9.3.1 |
| CVE-2023-37435 | 6.5 | Aug 22 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface Affected: before 9.3.1 |
| CVE-2026-76699 | 6.4 | Sep 15 | Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2024-22444 | 6.1 | Jul 24 | A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack… Affected: 9.1.0 through 9.1.9; 9.2.0 through 9.2.9; 9.3.0 before 9.3.3; 9.4.0 before 9.4.2 |
| CVE-2023-37439 | 6.1 | Aug 22 | Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface Affected: before 9.1.8; 9.2.0 before 9.2.6; 9.3.0 |
| CVE-2023-37425 | 6.1 | Aug 22 | Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2026-76701 | 5.9 | Sep 15 | Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76700 | 5.9 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76702 | 5.8 | Sep 15 | Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76705 | 5.5 | Sep 15 | Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76704 | 5.5 | Sep 15 | Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76703 | 5.5 | Sep 15 | Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2023-37423 | 5.4 | Aug 22 | Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37422 | 5.4 | Aug 22 | Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37421 | 5.4 | Aug 22 | Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2026-76706 | 5.3 | Sep 15 | Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2023-37440 | 5.3 | Aug 22 | Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure Affected: before 9.3.1 |
| CVE-2025-37185 | 4.8 | Jan 14 | Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface Affected: 9.2.0 through 9.2.10; 9.3.0 through 9.3.6; 9.4.0 through 9.4.4; 9.5.0 before 9.5.6; 9.6.0 |
| CVE-2026-76707 | 4.3 | Sep 15 | Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
Showing 26