Skip to content
Sign in
6.5 Medium

CVE-2023-37437 Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an…

Description

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to     obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host.

Affected products and versions

Product Affected versions Fixed in
EdgeConnect SD-WAN Orchestrator Versions not published
edgeconnect_sd-wan_orchestrator 9.3 9.3x → 9.3.0 No fix stated
edgeconnect_sd-wan_orchestrator 9.2 9.2x → latest No fix stated
edgeconnect_sd-wan_orchestrator 9.1 9.1x → latest No fix stated

Other CVEs of EdgeConnect SD-WAN Orchestrator

The 27 CVEs of EdgeConnect SD-WAN Orchestrator →
CVE-2026-63456 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an… 9.8 Critical CVE-2026-63455 Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an… 9.8 Critical CVE-2025-37181 Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… 7.2 High CVE-2025-37185 Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… 5.5 Medium
Track this CVE