Known vulnerabilities in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-63456 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an… | 9.8 Critical | Aug 4, 2026 |
| CVE-2026-63455 | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an… | 9.8 Critical | Aug 4, 2026 |
| CVE-2025-37181 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… | 7.2 High | Jan 14, 2026 |
| CVE-2025-37185 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… | 5.5 Medium | Jan 14, 2026 |
| CVE-2025-37184 | A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass… | 9.8 Critical | Jan 14, 2026 |
| CVE-2025-37183 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… | 7.2 High | Jan 14, 2026 |
| CVE-2025-37182 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated… | 7.2 High | Jan 14, 2026 |
| CVE-2023-37440 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow… | 5.5 Medium | Aug 22, 2023 |
| CVE-2023-37439 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.1 Medium | Aug 22, 2023 |
| CVE-2023-37438 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37437 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37436 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37435 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37434 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37433 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37432 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37431 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37430 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37429 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 6.5 Medium | Aug 22, 2023 |
| CVE-2023-37428 | A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote… | 7.2 High | Aug 22, 2023 |
| CVE-2023-37427 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 7.2 High | Aug 22, 2023 |
| CVE-2023-37426 | EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared… | 7.4 High | Aug 22, 2023 |
| CVE-2023-37425 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow… | 8.0 High | Aug 22, 2023 |
| CVE-2023-37424 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow… | 8.1 High | Aug 22, 2023 |
| CVE-2023-37423 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an… | 8.1 High | Aug 22, 2023 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18