Описание
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Уязвимые конфигурации
Одно из
EPSS
8.1 High
CVSS3
9 Critical
CVSS3
Дефекты
Связанные уязвимости
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Уязвимость веб-интерфейса управления программно-аппаратного средства управления программно-определяемыми сетями HPE Aruba Networking EdgeConnect SD-WAN Orchestrator, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
EPSS
8.1 High
CVSS3
9 Critical
CVSS3