HPE Aruba Networking EdgeConnect SD-WAN Orchestrator vulnerabilities

Product

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

by Hewlett Packard Enterprise · last CVE Jul 24, 2024

CVEs

On KEV

9.0

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 1High 1Medium 1Low 0

Severity

All severities3 Critical1 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add HPE Aruba Networking EdgeConnect SD-WAN Orchestrator to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-41914	9.0	1%	Jul 24	A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting… Affected: EdgeConnect SD-WAN Orchestrator 9.4.x: Orchestrator 9.4.1 (all builds) and below through <=9.4.1; EdgeConnect SD-WAN Orchestrator 9.3.x: Orchestrator 9.3.2 (all builds) and below through <=9.3.2; EdgeConnect SD-WAN Orchestrator 9.2.x: Orchestrator 9.2.9 (all builds) and below through <=9.2.9; EdgeConnect SD-WAN Orchestrator 9.1.x: Orchestrator 9.1.9 (all builds) and below through <=9.1.9
CVE-2024-22443	8.8	1%	Jul 24	A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution… Affected: EdgeConnect SD-WAN Orchestrator 9.4.x: Orchestrator 9.4.1 (all builds) and below through <=9.4.1; EdgeConnect SD-WAN Orchestrator 9.3.x: Orchestrator 9.3.2 (all builds) and below through <=9.3.2; EdgeConnect SD-WAN Orchestrator 9.2.x: Orchestrator 9.2.9 (all builds) and below through <=9.2.9; EdgeConnect SD-WAN Orchestrator 9.1.x: Orchestrator 9.1.9 (all builds) and below through <=9.1.9
CVE-2024-22444	6.1	0%	Jul 24	A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack… Affected: EdgeConnect SD-WAN Orchestrator 9.4.x: Orchestrator 9.4.1 (all builds) and below through <=9.4.1; EdgeConnect SD-WAN Orchestrator 9.3.x: Orchestrator 9.3.2 (all builds) and below through <=9.3.2; EdgeConnect SD-WAN Orchestrator 9.2.x: Orchestrator 9.2.9 (all builds) and below through <=9.2.9; EdgeConnect SD-WAN Orchestrator 9.1.x: Orchestrator 9.1.9 (all builds) and below through <=9.1.9