VDB
BDU%3A2024-05866
BDU%3A2024-05866
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Уязвимость веб-интерфейса управления программно-аппаратного средства управления программно-определяемыми сетями HPE Aruba Networking EdgeConnect SD-WAN Orchestrator, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise | HPE Aruba Networking EdgeConnect SD-WAN Orchestrator | EdgeConnect SD-WAN Orchestrator 9.4.x: Orchestrator 9.4.1 (all builds) and below, EdgeConnect SD-WAN Orchestrator 9.1.x: Orchestrator 9.1.9 (all builds) and below, EdgeConnect SD-WAN Orchestrator 9.2.x: Orchestrator 9.2.9 (all builds) and below |
| Aruba Networks | Networking EdgeConnect SD-WAN Orchestrator | |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.2.0, 9.4.0, 9.1.0 |
Timeline
- Jul 24, 2024 CVE Published
- Jul 24, 2024 PoC Published
- Jul 31, 2024 CVE Updated