Edgeconnect Sd Wan Orchestrator
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Edgeconnect Sd Wan Orchestrator (5fedb88a-0089-52b5-87e4-37f14b4c042b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-37185 |
vulnerable | 2026-06-08 07:21:02.333225 |
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
MEDIUM (5.5)
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface and thereby make unauthorized arbitrary configuration changes to the host.
Published: 2026-01-14T16:20:30.732Z
Updated: 2026-01-14T16:47:13.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37184 |
vulnerable | 2026-06-08 07:21:02.332791 |
Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention
CRITICAL (9.8)
A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby compromising the integrity of secured access to the system.
Published: 2026-01-14T16:19:45.879Z
Updated: 2026-03-03T17:48:58.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37183 |
vulnerable | 2026-06-08 07:21:02.332354 |
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HIGH (7.2)
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
Published: 2026-01-14T16:18:14.058Z
Updated: 2026-01-14T16:44:25.188Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37182 |
vulnerable | 2026-06-08 07:21:02.331890 |
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HIGH (7.2)
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
Published: 2026-01-14T16:17:12.170Z
Updated: 2026-01-14T16:40:21.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37181 |
vulnerable | 2026-06-08 07:21:02.329529 |
Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
HIGH (7.2)
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
Published: 2026-01-14T16:26:00.858Z
Updated: 2026-01-14T16:44:42.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37440 |
vulnerable | 2026-06-08 06:08:15.294164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37439 |
vulnerable | 2026-06-08 06:08:15.293755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37438 |
vulnerable | 2026-06-08 06:08:15.293227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37437 |
vulnerable | 2026-06-08 06:08:15.292814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37436 |
vulnerable | 2026-06-08 06:08:15.292416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37435 |
vulnerable | 2026-06-08 06:08:15.291998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37434 |
vulnerable | 2026-06-08 06:08:15.291346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37433 |
vulnerable | 2026-06-08 06:08:15.290811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37432 |
vulnerable | 2026-06-08 06:08:15.290180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37431 |
vulnerable | 2026-06-08 06:08:15.289467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37430 |
vulnerable | 2026-06-08 06:08:15.288980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37429 |
vulnerable | 2026-06-08 06:08:15.288107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37428 |
vulnerable | 2026-06-08 06:08:15.287376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37427 |
vulnerable | 2026-06-08 06:08:15.286812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37426 |
vulnerable | 2026-06-08 06:08:15.286218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37425 |
vulnerable | 2026-06-08 06:08:15.285567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37424 |
vulnerable | 2026-06-08 06:08:15.284927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37423 |
vulnerable | 2026-06-08 06:08:15.283014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37422 |
vulnerable | 2026-06-08 06:08:15.282576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37421 |
vulnerable | 2026-06-08 06:08:15.280635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.