Arubanetworks Aruba Edgeconnect Enterprise Orchestrator
16 CVEs affecting Arubanetworks Aruba Edgeconnect Enterprise Orchestrator. Latest disclosed: 2023-01-05. Critical: 3, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-37915 | Critical | 9.8 | 2022-10-28 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitr… |
CVE-2022-37914 | Critical | 9.8 | 2022-10-28 | Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass aut… |
CVE-2022-37913 | Critical | 9.8 | 2022-10-28 | Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass aut… |
CVE-2022-44535 | High | 8.8 | 2023-01-05 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate th… |
CVE-2022-43523 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43522 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43521 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43520 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43519 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43524 | High | 8.7 | 2023-01-05 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a st… |
CVE-2022-44534 | High | 7.2 | 2023-01-05 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on… |
CVE-2022-43527 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43526 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43525 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43528 | Medium | 4.8 | 2023-01-05 | Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code. Successf… |
CVE-2022-43529 | Medium | 4.6 | 2023-01-05 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a… |