Skip to content
Sign in
6.1 Medium

CVE-2024-22444 A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote…

Description

A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.

Affected products and versions

Product Affected versions Fixed in
HPE Aruba Networking EdgeConnect SD-WAN Orchestrator Versions not published
edgeconnect_sd-wan_orchestrator 9.4 9.4.0 → 9.4.1 No fix stated

Other CVEs of HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

The 3 CVEs of HPE Aruba Networking EdgeConnect SD-WAN Orchestrator →
CVE-2024-22443 A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… 7.2 High CVE-2024-41914 A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… 8.1 High
Track this CVE