VMware SD-WAN Orchestrator 3.3.2 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:sd-wan_orchestrator:3.3.2:p1:*:*:*:*:*:*
part: a version: 3.3.2 update: p1
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Sd Wan Orchestrator (0e002b2b-5cc1-5456-abeb-90d370469cbe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-4003 |
vulnerable | 2026-06-08 05:25:58.651734 |
Details available
VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to information disclosure.
Published: 2020-11-24T15:29:38.000Z
Updated: 2024-08-04T07:52:20.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4002 |
vulnerable | 2026-06-08 05:25:58.651273 |
Details available
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 handles system parameters in an insecure way. An authenticated SD-WAN Orchestrator user with high privileges may be able to execute arbitrary code on the underlying operating system.
Published: 2020-11-24T15:29:29.000Z
Updated: 2024-08-04T07:52:20.535Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4001 |
vulnerable | 2026-06-08 05:25:58.650602 |
Details available
The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack.
Published: 2020-11-24T15:29:22.000Z
Updated: 2024-08-04T07:52:20.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4000 |
vulnerable | 2026-06-08 05:25:58.650110 |
Details available
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files.
Published: 2020-11-24T15:35:07.000Z
Updated: 2024-08-04T07:52:20.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3985 |
vulnerable | 2026-06-08 05:25:58.574135 |
Details available
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization levels leading to a privilege escalation issue. An authenticated SD-WAN Orchestrator user may exploit an application weakness and call a vulnerable API to elevate their privileges.
Published: 2020-11-24T15:35:00.000Z
Updated: 2024-08-04T07:52:20.834Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3984 |
vulnerable | 2026-06-08 05:25:58.573058 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.