Stored Cross-Site Scripting Vulnerabilities in EdgeConnect SD-WAN Orchestrator

CVE-2025-37185

What is CVE-2025-37185?

The web-based management interface of EdgeConnect SD-WAN Orchestrator is susceptible to stored cross-site scripting vulnerabilities, which could be exploited by authenticated remote attackers. Through successful exploitation, an attacker can inject arbitrary script code into the browser of an administrative user. This could enable the attacker to manipulate configurations without authorization, significantly compromising the integrity and security of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References