Vmware Sd Wan Orchestrator
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:vmware_sd-wan_orchestrator:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Vmware Sd Wan Orchestrator (78d31b01-2408-543d-af86-e3ee6172b266) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22248 |
vulnerable | 2026-06-08 06:29:34.215583 |
Details available
HIGH (7.1)
VMware SD-WAN Orchestrator contains an open redirect vulnerability.
A malicious actor may be able to redirect a victim to an attacker
controlled domain due to improper path handling leading to sensitive
information disclosure.
Published: 2024-04-02T15:51:06.782Z
Updated: 2024-11-01T15:52:09.920Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4003 |
vulnerable | 2026-06-08 05:25:58.651663 |
Details available
VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to information disclosure.
Published: 2020-11-24T15:29:38.000Z
Updated: 2024-08-04T07:52:20.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4002 |
vulnerable | 2026-06-08 05:25:58.650991 |
Details available
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameters in an insecure way. An authenticated SD-WAN Orchestrator user with high privileges may be able to execute arbitrary code on the underlying operating system.
Published: 2020-11-24T15:29:29.000Z
Updated: 2024-08-04T07:52:20.535Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4001 |
vulnerable | 2026-06-08 05:25:58.650529 |
Details available
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
Published: 2020-11-24T15:29:22.000Z
Updated: 2024-08-04T07:52:20.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4000 |
vulnerable | 2026-06-08 05:25:58.650017 |
Details available
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files.
Published: 2020-11-24T15:35:07.000Z
Updated: 2024-08-04T07:52:20.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3985 |
vulnerable | 2026-06-08 05:25:58.574034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3984 |
vulnerable | 2026-06-08 05:25:58.570959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.