Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37393 State: PUBLISHED Published: 2023-09-04T10:21:00.298Z Last Updated: 2024-09-24T18:51:43.634Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Atarim Products: Visual Website Collaboration, Feedback & Project Management – Atarim Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-9-3-reflected-cross-site-s
//patchstack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37394 State: PUBLISHED Published: 2024-06-13T23:44:18.175Z Last Updated: 2024-08-02T17:09:34.199Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Deepak anand Products: WP Dummy Content Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-dummy-content-generator/wordpress-wp-dummy-content-generator-plugin-2-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37395 State: PUBLISHED Published: 2024-12-11T02:49:38.428Z Last Updated: 2024-12-11T15:33:45.364Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-327 Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7148632
CVE ID: CVE-2023-37396 State: PUBLISHED Published: 2024-04-19T16:06:03.554Z Last Updated: 2024-09-20T19:49:01.215Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-327 Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/259671
CVE ID: CVE-2023-37397 State: PUBLISHED Published: 2024-04-19T16:54:19.875Z Last Updated: 2024-08-02T17:16:29.338Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-326 Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/259672
CVE ID: CVE-2023-37398 State: PUBLISHED Published: 2025-01-29T16:35:45.779Z Last Updated: 2025-02-12T16:47:19.522Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-521 Description: IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7181814
CVE ID: CVE-2023-37400 State: PUBLISHED Published: 2024-04-19T14:02:50.896Z Last Updated: 2024-08-02T17:16:29.371Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-522 Description: IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential storage. IBM X-Force ID: 259677. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/259677
CVE ID: CVE-2023-37401 State: PUBLISHED Published: 2025-10-09T13:54:38.846Z Last Updated: 2025-10-09T19:06:07.254Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-942 Description: IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7247502
CVE ID: CVE-2023-37404 State: PUBLISHED Published: 2023-10-04T01:17:44.404Z Last Updated: 2024-09-19T19:26:57.462Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Observability with Instana Problem Types: 940 Improper Verification of Source of a Communication Channel Description: IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7041863 - https://exchange.xforce.ibmcloud.co
ISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7041863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/259789
CVE ID: CVE-2023-37405 State: PUBLISHED Published: 2025-03-27T17:20:04.260Z Last Updated: 2025-08-17T01:14:54.449Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cloud Pak System Problem Types: CWE-311 Description: IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 stores sensitive data in memory, that could be obtained by an unauthorized user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229212
CVE ID: CVE-2023-37407 State: PUBLISHED Published: 2024-05-03T15:35:20.652Z Last Updated: 2024-08-02T17:16:29.338Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Aspera Orchestrator Problem Types: CWE-78 Description: IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/260116
CVE ID: CVE-2023-37410 State: PUBLISHED Published: 2023-09-20T19:06:55.922Z Last Updated: 2024-09-24T15:38:14.521Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Person Communications Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7031707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/260138
CVE ID: CVE-2023-37411 State: PUBLISHED Published: 2024-05-28T12:06:05.023Z Last Updated: 2024-08-02T17:16:29.498Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-79 Description: IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260139. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7154977 - https:
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7154977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/260139
CVE ID: CVE-2023-37412 State: PUBLISHED Published: 2025-01-29T16:34:55.809Z Last Updated: 2025-02-12T16:48:00.305Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-250 Description: IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access controls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7181814
CVE ID: CVE-2023-37413 State: PUBLISHED Published: 2025-01-29T16:36:24.872Z Last Updated: 2025-02-12T16:39:51.480Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: CWE-204 Description: IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7181814
CVE ID: CVE-2023-37415 State: PUBLISHED Published: 2023-07-13T07:35:33.474Z Last Updated: 2025-02-13T17:01:18.439Z Vendors: Apache Software Foundation Products: Apache Airflow Apache Hive Provider Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxy_user option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: before 6.1.2. It is recommended updating provider version to 6.1.2 in order to avoid this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.
vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/9wx0jlckbnycjh8nj5qfwxo423zvm41k - http://www.openwall.com/lists/oss-security/2023/07/12/3
CVE ID: CVE-2023-37416 State: PUBLISHED Published: 2024-01-08T14:47:53.311Z Last Updated: 2025-11-04T18:15:27.282Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-787 Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's legacy VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
en triggered via the GUI's legacy VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37417 State: PUBLISHED Published: 2024-01-08T14:47:53.395Z Last Updated: 2025-11-04T18:15:28.683Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-787 Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's interactive VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
en triggered via the GUI's interactive VCD parsing code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37418 State: PUBLISHED Published: 2024-01-08T14:47:53.478Z Last Updated: 2025-11-04T18:15:29.926Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-787 Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
en triggered via the vcd2vzt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37419 State: PUBLISHED Published: 2024-01-08T14:47:53.565Z Last Updated: 2025-11-04T18:15:31.163Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-787 Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
en triggered via the vcd2lxt2 conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37420 State: PUBLISHED Published: 2024-01-08T14:47:53.651Z Last Updated: 2025-11-04T18:15:32.393Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-787 Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
en triggered via the vcd2lxt conversion utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-37421 State: PUBLISHED Published: 2023-08-22T17:57:19.127Z Last Updated: 2024-10-03T19:35:36.448Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Con
script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37422 State: PUBLISHED Published: 2023-08-22T17:57:26.526Z Last Updated: 2024-10-03T15:22:54.945Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Con
CVE ID: CVE-2023-37423 State: PUBLISHED Published: 2023-08-22T17:57:30.109Z Last Updated: 2024-10-03T15:21:54.991Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Con
CVE ID: CVE-2023-37424 State: PUBLISHED Published: 2023-08-22T17:59:26.532Z Last Updated: 2024-10-03T15:20:46.719Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system co
y could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37425 State: PUBLISHED Published: 2023-08-22T18:01:03.060Z Last Updated: 2024-10-03T15:15:23.972Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Con
CVE ID: CVE-2023-37426 State: PUBLISHED Published: 2023-08-22T18:02:22.824Z Last Updated: 2024-10-03T15:04:38.699Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations. This vulnerability could allow an attacker to spoof the SSH host signature and thereby masquerade as a legitimate Orchestrator host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/asse
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37427 State: PUBLISHED Published: 2023-08-22T18:03:52.781Z Last Updated: 2024-10-03T14:51:40.904Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CIS
erlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37428 State: PUBLISHED Published: 2023-08-22T18:04:50.122Z Last Updated: 2024-10-03T14:48:07.190Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
o complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37429 State: PUBLISHED Published: 2023-08-22T18:07:58.022Z Last Updated: 2024-10-03T14:45:14.356Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat
ify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive data controlled by the EdgeConnect SD-WAN Orchestrator host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt
CVE ID: CVE-2023-37430 State: PUBLISHED Published: 2023-08-22T18:08:01.717Z Last Updated: 2024-10-03T14:41:00.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: EdgeConnect SD-WAN Orchestrator Description: Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to the exposure and corruption of sensitive dat