Approved changes feed: RSS · Atom

cpe:2.3:a:hpe:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHpe (8bc0c2a2-a9de-5f61-aa1f-0aa716beac6b)
ProductEdgeconnect Sd Wan Orchestrator (5ff83c88-65b2-51ac-be86-c0f16147dbb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37438 vulnerable 2026-06-08 06:08:15.293194 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
MEDIUM (6.5)
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.
Published: 2023-08-22T18:08:32.465Z
Updated: 2024-10-03T14:16:57.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37437 vulnerable 2026-06-08 06:08:15.292781 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
MEDIUM (6.5)
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.
Published: 2023-08-22T18:08:28.560Z
Updated: 2024-10-03T14:21:24.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37436 vulnerable 2026-06-08 06:08:15.292385 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
MEDIUM (6.5)
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.
Published: 2023-08-22T18:08:25.585Z
Updated: 2024-10-04T15:48:23.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37435 vulnerable 2026-06-08 06:08:15.291964 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
MEDIUM (6.5)
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.
Published: 2023-08-22T18:08:21.918Z
Updated: 2024-10-04T15:51:02.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37434 vulnerable 2026-06-08 06:08:15.291229 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
MEDIUM (6.5)
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.
Published: 2023-08-22T18:08:17.910Z
Updated: 2024-10-04T15:56:14.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37433 vulnerable 2026-06-08 06:08:15.290776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37432 vulnerable 2026-06-08 06:08:15.290136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37431 vulnerable 2026-06-08 06:08:15.289433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37430 vulnerable 2026-06-08 06:08:15.288930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37429 vulnerable 2026-06-08 06:08:15.287983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37428 vulnerable 2026-06-08 06:08:15.287341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37427 vulnerable 2026-06-08 06:08:15.286654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37426 vulnerable 2026-06-08 06:08:15.286180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37424 vulnerable 2026-06-08 06:08:15.284871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.