CVE-2024-41914: XSS
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41914?
CVE-2024-41914 has a severity rating that indicates a significant risk due to the potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-41914?
To fix CVE-2024-41914, you should update the EdgeConnect SD-WAN Orchestrator to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-41914?
CVE-2024-41914 affects users of EdgeConnect SD-WAN Orchestrator versions 9.1.0 through 9.4.1.
What type of attack is associated with CVE-2024-41914?
CVE-2024-41914 is associated with stored cross-site scripting (XSS) attacks, which can be executed by authenticated remote attackers.
Can CVE-2024-41914 impact administrative users of EdgeConnect SD-WAN Orchestrator?
Yes, CVE-2024-41914 specifically targets administrative users through the web-based management interface.