Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface

CVE-2023-37422

What is CVE-2023-37422?

A vulnerability has been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator, allowing authenticated remote attackers to mount stored cross-site scripting (XSS) attacks. If exploited, this vulnerability can lead to the execution of arbitrary script code in the browser of an administrative user, posing significant security risks. Administrators must ensure proper security measures are in place to mitigate these types of attacks and safeguard the integrity of their web management systems.

References