High severity8.1NVD Advisory· Published Aug 22, 2023· Updated Jun 17, 2026
CVE-2023-37422
CVE-2023-37422
Description
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected products
2- Hewlett Packard Enterprise (HPE)/EdgeConnect SD-WAN Orchestratorv5Range: Orchestrator 9.3.x
Patches
Vulnerability mechanics
References
1- www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txtnvdVendor Advisory
News mentions
0No linked articles in our index yet.