Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface

CVE-2023-37423

What is CVE-2023-37423?

The web-based management interface of EdgeConnect SD-WAN Orchestrator contains vulnerabilities that may allow an authenticated remote attacker to execute a stored cross-site scripting (XSS) attack on an administrative user. When exploited, this vulnerability enables the attacker to run arbitrary script code in the victim's browser, potentially compromising sensitive information or furthering intrusion attempts within the affected environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References