Stored Cross-Site Scripting Vulnerabilities in EdgeConnect SD-WAN Orchestrator

CVE-2025-37185

What is CVE-2025-37185?

The web-based management interface of EdgeConnect SD-WAN Orchestrator is susceptible to stored cross-site scripting vulnerabilities, which could be exploited by authenticated remote attackers. Through successful exploitation, an attacker can inject arbitrary script code into the browser of an administrative user. This could enable the attacker to manipulate configurations without authorization, significantly compromising the integrity and security of the affected systems.

References