AE
Product
Aruba Edgeconnect Enterprise Orchestrator
by Arubanetworks · last CVE Jan 5, 2023
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch

Add Aruba Edgeconnect Enterprise Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43528
6.5
0%
Jan 5
Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
CVE-2022-43527
6.1
0%
Jan 5
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site…
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
CVE-2022-43526
6.1
0%
Jan 5
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site…
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
CVE-2022-43525
6.1
0%
Jan 5
Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site…
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
CVE-2022-43529
5.4
0%
Jan 5
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or…
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
CVE-2022-43524
5.4
1%
Jan 5
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site…
Affected: through 8.10.23.40015; 9.0.0 through 9.0.7.40110; 9.1.0 through 9.1.4.40436; 9.2.0 through 9.2.1.40179; through 8.10.23.40015; 9.0.0 through 9.0.7.40110; +10 more
Showing 6