Aruba Edgeconnect Enterprise Orchestrator vulnerabilities

8 known vulnerabilities in Aruba Edgeconnect Enterprise Orchestrator from Aruba Networks. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Aruba EdgeConnect Enterprise Orchestration…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43523Jan 5, 2023Hewlett Packard EnterpriseEPSS 1.01%

  Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacke

• 8.8 High severity

  Aruba EdgeConnect Enterprise Orchestration…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43522Jan 5, 2023Hewlett Packard EnterpriseEPSS 1.01%

  Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacke

• 8.8 High severity

  Aruba EdgeConnect Enterprise Orchestration…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43521Jan 5, 2023Hewlett Packard EnterpriseEPSS 1.01%

  Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacke

• 8.8 High severity

  Aruba EdgeConnect Enterprise Orchestration…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43520Jan 5, 2023Hewlett Packard EnterpriseEPSS 1.01%

  Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacke

• 8.8 High severity

  Aruba EdgeConnect Enterprise Orchestration…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43519Jan 5, 2023Hewlett Packard EnterpriseEPSS 1.01%

  Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacke

• 9.8 Critical severity

  Aruba EdgeConnect Enterprise Orchestrator…: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-37915Oct 28, 2022Aruba EdgeConnect Enterprise Orchestrator (on-premises)EPSS 1.85%

  A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an att

• 9.8 Critical severity

  Aruba EdgeConnect Enterprise Orchestrator…: Improper Authentication

  CVE-2022-37914Oct 28, 2022Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant OrchestratorsEPSS 1.55%

  Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain adminis

• 9.8 Critical severity

  Aruba EdgeConnect Enterprise Orchestrator…: Improper Authentication

  CVE-2022-37913Oct 28, 2022Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant OrchestratorsEPSS 1.55%

  Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain adminis