Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface

CVE-2023-37423

What is CVE-2023-37423?

The web-based management interface of EdgeConnect SD-WAN Orchestrator contains vulnerabilities that may allow an authenticated remote attacker to execute a stored cross-site scripting (XSS) attack on an administrative user. When exploited, this vulnerability enables the attacker to run arbitrary script code in the victim's browser, potentially compromising sensitive information or furthering intrusion attempts within the affected environment.

References