Edgeconnect Sd-wan Orchestrator (Arubanetworks) - vulnerabilities (CVEs)

71 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2026-09-15. Vendor: Arubanetworks.

CVEs of Edgeconnect Sd-wan Orchestrator

CVE-2026-76707 - CVSS 4.3 (medium), 2026-09-15: A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful…
CVE-2026-76706 - CVSS 5.3 (medium), 2026-09-15: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive…
CVE-2026-76705 - CVSS 5.5 (medium), 2026-09-15: A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated…
CVE-2026-76704 - CVSS 5.5 (medium), 2026-09-15: A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary…
CVE-2026-76703 - CVSS 5.5 (medium), 2026-09-15: A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated…
CVE-2026-76702 - CVSS 5.8 (medium), 2026-09-15: A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a…
CVE-2026-76701 - CVSS 5.9 (medium), 2026-09-15: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive…
CVE-2026-76700 - CVSS 5.9 (medium), 2026-09-15: Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful…
CVE-2026-76698 - CVSS 6.5 (medium), 2026-09-15: A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker…
CVE-2026-76699 - CVSS 6.4 (medium), 2026-09-15: A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could…
CVE-2026-76697 - CVSS 6.5 (medium), 2026-09-15: A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low…
CVE-2026-76696 - CVSS 6.5 (medium), 2026-09-15: A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack.…
CVE-2026-76695 - CVSS 6.5 (medium), 2026-09-15: Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated…
CVE-2026-76694 - CVSS 6.6 (medium), 2026-09-15: A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow…
CVE-2026-76693 - CVSS 7 (high), 2026-09-15: A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain…
CVE-2026-76692 - CVSS 7.1 (high), 2026-09-15: A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and…
CVE-2026-76691 - CVSS 7.2 (high), 2026-09-15: Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated…
CVE-2026-76690 - CVSS 7.2 (high), 2026-09-15: A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated…
CVE-2026-76689 - CVSS 7.2 (high), 2026-09-15: A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote…
CVE-2026-76688 - CVSS 7.5 (high), 2026-09-15: Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated…
CVE-2026-76687 - CVSS 7.5 (high), 2026-09-15: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate…
CVE-2026-76686 - CVSS 7.5 (high), 2026-09-15: A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an…
CVE-2026-76685 - CVSS 8.1 (high), 2026-09-15: A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An…
CVE-2026-76684 - CVSS 8.1 (high), 2026-09-15: Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor…
CVE-2026-76683 - CVSS 8.1 (high), 2026-09-15: Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to…
CVE-2026-76682 - CVSS 8.2 (high), 2026-09-15: A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a…
CVE-2026-76681 - CVSS 8.5 (high), 2026-09-15: A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information…
CVE-2026-76680 - CVSS 8.5 (high), 2026-09-15: Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request…
CVE-2026-76679 - CVSS 8.6 (high), 2026-09-15: Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks.…
CVE-2026-76678 - CVSS 8.8 (high), 2026-09-15: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate…
CVE-2026-76677 - CVSS 8.8 (high), 2026-09-15: A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged…
CVE-2026-76676 - CVSS 8.8 (high), 2026-09-15: Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker…
CVE-2026-76675 - CVSS 9.1 (critical), 2026-09-15: A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated…
CVE-2026-76674 - CVSS 9.8 (critical), 2026-09-15: Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated…
CVE-2026-76673 - CVSS 9.8 (critical), 2026-09-15: Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent…
CVE-2026-76672 - CVSS 9.9 (critical), 2026-09-15: A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with…
CVE-2026-76670 - CVSS 9.9 (critical), 2026-09-15: Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote…
CVE-2026-76669 - CVSS 9.9 (critical), 2026-09-15: Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote…
CVE-2025-37182 - CVSS 7.2 (high), 2026-01-14: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection…
CVE-2025-37185 - CVSS 5.5 (medium), 2026-01-14: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…
CVE-2025-37184 - CVSS 9.8 (critical), 2026-01-14: A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements.…
CVE-2025-37183 - CVSS 7.2 (high), 2026-01-14: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection…
CVE-2025-37181 - CVSS 7.2 (high), 2026-01-14: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection…
CVE-2024-41136 - CVSS 8.8 (high), 2024-07-24: An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful…
CVE-2024-41135 - CVSS 7.2 (high), 2024-07-24: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary…
CVE-2024-41134 - CVSS 7.2 (high), 2024-07-24: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary…
CVE-2024-41133 - CVSS 7.2 (high), 2024-07-24: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run arbitrary…
CVE-2024-33519 - CVSS 7.2 (high), 2024-07-24: A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to…
CVE-2024-22444 - CVSS 6.1 (medium), 2024-07-24: A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site…
CVE-2024-41914 - CVSS 9 (critical), 2024-07-24: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…
CVE-2024-22443 - CVSS 8.8 (high), 2024-07-24: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side…
CVE-2023-37434 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37437 - CVSS 6.5 (medium), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37440 - CVSS 5.5 (medium), 2023-08-22: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a…
CVE-2023-37433 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37436 - CVSS 6.5 (medium), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37439 - CVSS 6.1 (medium), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37432 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37435 - CVSS 6.5 (medium), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37438 - CVSS 6.5 (medium), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37431 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37427 - CVSS 7.2 (high), 2023-08-22: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary…
CVE-2023-37430 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37426 - CVSS 7.5 (high), 2023-08-22: EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all…
CVE-2023-37429 - CVSS 8.1 (high), 2023-08-22: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL…
CVE-2023-37425 - CVSS 8 (high), 2023-08-22: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a…
CVE-2023-37428 - CVSS 7.2 (high), 2023-08-22: A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the…
CVE-2023-37421 - CVSS 8.1 (high), 2023-08-22: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…
CVE-2023-37424 - CVSS 8.1 (high), 2023-08-22: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary…
CVE-2023-37423 - CVSS 8.1 (high), 2023-08-22: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…
CVE-2023-37422 - CVSS 8.1 (high), 2023-08-22: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…