Priority MEDIUM 52
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01833 · Published 2022-10-28 · No fix listed CWE-78
Priority MEDIUM 52
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0154 · Published 2022-10-28 · No fix listed CWE-287
Priority MEDIUM 52
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0154 · Published 2022-10-28 · No fix listed CWE-287
Priority MEDIUM 42
A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate their privileges to those of an administrative user.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00957 · Published 2023-01-03 · No fix listed
Priority MEDIUM 42
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2023-01-03 · No fix listed CWE-89
Priority MEDIUM 42
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2023-01-03 · No fix listed CWE-89
Priority MEDIUM 42
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2023-01-03 · No fix listed CWE-89
Priority MEDIUM 42
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2023-01-03 · No fix listed CWE-89
Priority MEDIUM 42
Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Ente…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2023-01-03 · No fix listed CWE-89
Priority MEDIUM 40
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrat…
CVSS 3.1HIGH 8.7· Network · Low privileges · User interaction · EPSS 0.0054 · Published 2023-01-03 · No fix listed CWE-79
Priority LOW 36
A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01199 · Published 2023-01-03 · No fix listed
Priority LOW 29
Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00393 · Published 2023-01-03 · No fix listed CWE-287
Priority LOW 28
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00492 · Published 2023-01-03 · No fix listed CWE-79
Priority LOW 28
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00492 · Published 2023-01-03 · No fix listed CWE-79
Priority LOW 28
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00492 · Published 2023-01-03 · No fix listed CWE-79
Priority LOW 25
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00453 · Published 2023-01-03 · No fix listed CWE-384