Hewlett Packard Enterprise HPE Aruba Networking EdgeConnect SD-WAN Orchestrator

• CVE-2024-22444 Medium 6.1 A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of th 0.3%
• CVE-2024-22443 High 7.2 A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful ex 0.8%
• CVE-2024-41914 High 8.1 A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an a 0.5%