High WID-SEC-2022-2311 13 CVEs

Aruba EdgeConnect Orchestrator: Mehrere Schwachstellen

Published Dec 13, 2022 · Updated Dec 13, 2022 · de-DE

Vendor: Aruba Product: EdgeConnect Product: EdgeConnect Orchestrator < 9.1.5.40037 Product: EdgeConnect Orchestrator < 9.2.2.40291

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Aruba EdgeConnect Orchestrator ausnutzen, um einen SQL-Injection- oder Cross Site Scripting Angriff durchzuführen, seine Rechte zu erweitern, Code auszuführen und Sicherheitsvorkehrungen zu umgehen.

Product

Aruba EdgeConnect ist eine SD-WAN-Produktfamilie für Unternehmenskunden.

Vulnerabilities 13

High 8.8

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.8

CVE-2022-43520

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.8

CVE-2022-43521

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.8

CVE-2022-43522

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.8

CVE-2022-43523

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.8

CVE-2022-44535

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privi…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 8.7

CVE-2022-43524

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authe…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
High 7.2

CVE-2022-44534

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authentic…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
Medium 6.1

CVE-2022-43525

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
Medium 6.1

CVE-2022-43526

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
Medium 6.1

CVE-2022-43527

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could a…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
Medium 4.8

CVE-2022-43528

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a mu…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023
Medium 4.6

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remot…

Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Orchestration Software

Jan 3, 2023

Revision history

2022-12-13 #1
Initiale Fassung

References

Aruba Product Security Advisory vom 2022-12-13
https://www.arubanetworks.com/security-advisory/multiple-vulnerabilities-in-aruba-edgeconnect-enterprise-orchestrator-2/