Approved changes feed: RSS · Atom

cpe:2.3:a:hewlett_packard_enterprise:hpe_aruba_networking_edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHewlett Packard Enterprise (cf91c099-7d18-57d8-9f3b-5c65b8b58b47)
ProductHpe Aruba Networking Edgeconnect Sd Wan Orchestrator (1f77c857-f1f8-58f5-8a2c-074943118e30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41914 vulnerable 2026-06-08 06:43:55.452013 Details available
HIGH (8.1)
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Published: 2024-07-24T14:57:55.556Z
Updated: 2024-08-12T21:07:17.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22444 vulnerable 2026-06-08 06:29:35.100994 Details available
MEDIUM (6.1)
A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.
Published: 2024-07-24T15:17:18.394Z
Updated: 2024-08-01T22:43:34.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22443 vulnerable 2026-06-08 06:29:35.099136 Details available
HIGH (7.2)
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Published: 2024-07-24T15:08:07.150Z
Updated: 2024-08-01T22:43:34.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.