Approved changes feed: RSS · Atom

cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.0:*:*:*:*:*:*:*

part: a version: 9.4.0 update: *

VendorArubanetworks (3287c295-e9c7-5718-acd2-a08960c91bf2)
ProductEdgeconnect Sd Wan Orchestrator (b444086e-4a8c-5f73-8020-d65f25bea179)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22444 vulnerable 2026-06-08 06:29:35.100967 Details available
MEDIUM (6.1)
A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.
Published: 2024-07-24T15:17:18.394Z
Updated: 2024-08-01T22:43:34.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22443 vulnerable 2026-06-08 06:29:35.098327 Details available
HIGH (7.2)
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Published: 2024-07-24T15:08:07.150Z
Updated: 2024-08-01T22:43:34.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.