AE
Product
Aruba Edgeconnect Enterprise Orchestrator
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch
Add Aruba Edgeconnect Enterprise Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-37913 | 9.8 | Oct 28 | Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication Affected: before 8.10.23.40009; 9.0.0 before 9.0.7.40108; 9.1.0 before 9.1.3.40197; before 8.10.23.40009; 9.0.0 before 9.0.7.40108; 9.1.0 before 9.1.3.40197; +6 more |
| CVE-2022-37914 | 9.8 | Oct 28 | Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication Affected: before 8.10.23.40009; 9.0.0 before 9.0.7.40108; 9.1.0 before 9.1.3.40197; before 8.10.23.40009; 9.0.0 before 9.0.7.40108; 9.1.0 before 9.1.3.40197; +6 more |
| CVE-2022-37915 | 9.8 | Oct 28 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the… Affected: 9.1.0 before 9.1.3.40197 |
| CVE-2022-44535 | 8.8 | Jan 5 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate their privileges to… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43523 | 8.8 | Jan 5 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43522 | 8.8 | Jan 5 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43521 | 8.8 | Jan 5 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43520 | 8.8 | Jan 5 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43519 | 8.8 | Jan 5 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-44534 | 7.2 | Jan 5 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43528 | 6.5 | Jan 5 | Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43527 | 6.1 | Jan 5 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43526 | 6.1 | Jan 5 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43525 | 6.1 | Jan 5 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43529 | 5.4 | Jan 5 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
| CVE-2022-43524 | 5.4 | Jan 5 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site… Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more |
Showing 16