CVE-2023-37422: Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-37422.
What is the severity of CVE-2023-37422?
The severity of CVE-2023-37422 is high.
What is the affected software of CVE-2023-37422?
The affected software of CVE-2023-37422 is Arubanetworks Edgeconnect Sd-wan Orchestrator versions 9.0.0 to 9.0.5, 9.1.0 to 9.1.7, 9.2.0 to 9.2.5, and 9.3.0.
What type of vulnerability is CVE-2023-37422?
CVE-2023-37422 is a stored cross-site scripting (XSS) vulnerability.
How can an attacker exploit CVE-2023-37422?
An attacker can exploit CVE-2023-37422 by conducting a stored cross-site scripting (XSS) attack against an administrative user of the web-based management interface of Arubanetworks Edgeconnect Sd-wan Orchestrator.