HPE Aruba Networking EdgeConnect SD-WAN Orchestrator vulnerabilities

2 known vulnerabilities in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator from Hewlett Packard Enterprise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  HPE Aruba Networking EdgeConnect SD-WAN…: Improper Neutralization of Input During Web Page Generation

  CVE-2024-41914Jul 24, 2024Hewlett Packard Enterprise

  A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit al

• 8.8 High severity

  HPE Aruba Networking EdgeConnect SD-WAN…: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-22443Jul 24, 2024Hewlett Packard Enterprise

  A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to