Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator

• CVE-2026-63456 Critical 9.8 Authentication bypass via spoofed HTTP headers Orchestrator REST API 0.8%
• CVE-2026-63455 Critical 9.8 Authentication bypass via spoofed HTTP headers Orchestrator REST API 0.8%
• CVE-2025-37181 High 7.2 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 0.5%
• CVE-2025-37185 Medium 5.5 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 0.3%
• CVE-2025-37184 Critical 9.8 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention 0.6%
• CVE-2025-37183 High 7.2 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 0.5%
• CVE-2025-37182 High 7.2 Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 0.5%
• CVE-2023-37440 Medium 5.5 Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure 0.6%
• CVE-2023-37439 Medium 6.1 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface 0.5%
• CVE-2023-37438 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37437 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37436 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37435 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37434 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 1.0%
• CVE-2023-37433 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37432 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37431 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37430 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37429 Medium 6.5 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface 0.8%
• CVE-2023-37428 High 7.2 Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 1.1%
• CVE-2023-37427 High 7.2 Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 1.3%
• CVE-2023-37426 High 7.4 Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator 0.5%
• CVE-2023-37425 High 8.0 Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 0.5%
• CVE-2023-37424 High 8.1 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface 0.9%
• CVE-2023-37423 High 8.1 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 0.5%
• CVE-2023-37422 High 8.1 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 0.5%
• CVE-2023-37421 High 8.1 Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface 0.5%