Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

EdgeConnect SD-WAN Orchestrator — Vulnerabilities & Security Advisories 27

All 27 CVE vulnerabilities found in EdgeConnect SD-WAN Orchestrator, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerabilities affecting the EdgeConnect SD-WAN Orchestrator, categorized primarily by Common Weakness Enumeration (CWE) types. It collects security flaws reported for this specific product, covering advisories issued from 2023 to present. Readers can use this section to track the vendor's published advisories, analyze the prevalence of specific weakness classes within the orchestrator, and review the complete vulnerability history of the software. The data is sourced from major vulnerability databases and is updated weekly. Each entry links to the original advisory, providing context for each reported issue. Users can filter results by impact severity, affected component, or discovery date. This view helps security teams prioritize remediation efforts by identifying recurring patterns in the product’s defect profile. There are no marketing claims here; the focus is strictly on factual vulnerability data for operational security planning. The aggregation supports compliance reporting by providing a centralized log of security incidents. Users should note that not all listed issues are patched; the status field indicates whether a fix is available. This resource is intended for security analysts and IT administrators managing SD-WAN infrastructure. It does not replace in-depth penetration testing but serves as a monitoring tool for ongoing risk management.

Vendor: Hewlett Packard Enterprise (HPE)

CVE ID Title CVSS Severity Published
CVE-2026-63456 Authentication bypass via spoofed HTTP headers Orchestrator REST API 9.8 Critical 2026-08-04
CVE-2026-63455 Authentication bypass via spoofed HTTP headers Orchestrator REST API 9.8 Critical 2026-08-04
CVE-2025-37181 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 7.2 High 2026-01-14
CVE-2025-37185 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 5.5 Medium 2026-01-14
CVE-2025-37184 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention 9.8 Critical 2026-01-14
CVE-2025-37183 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 7.2 High 2026-01-14
CVE-2025-37182 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 7.2 High 2026-01-14
CVE-2023-37440 Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure 5.5 Medium 2023-08-22
CVE-2023-37439 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface 6.1 Medium 2023-08-22
CVE-2023-37438 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37437 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37436 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37435 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37434 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37433 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37432 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37431 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37430 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37429 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 6.5 Medium 2023-08-22
CVE-2023-37428 Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 7.2 High 2023-08-22
CVE-2023-37427 Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 7.2 High 2023-08-22
CVE-2023-37426 Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator 7.4 High 2023-08-22
CVE-2023-37425 Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 8.0 High 2023-08-22
CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 8.1 High 2023-08-22
CVE-2023-37423 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 8.1 High 2023-08-22
CVE-2023-37422 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 8.1 High 2023-08-22
CVE-2023-37421 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 8.1 High 2023-08-22

All 27 known CVE vulnerabilities affecting EdgeConnect SD-WAN Orchestrator with full Chinese analysis, references, and POCs where available.