CVE-2025-37185: Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored…

PriorityP422medium4.8CVSS 3.1

AVNACLPRHUIRSCCLILAN

EPSS

0.22%

12.8th percentile

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface and thereby make unauthorized arbitrary configuration changes to the host.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	edgeconnect_sd-wan_orchestrator	—	—
arubanetworks	edgeconnect_sd-wan_orchestrator	9.2.0 – 9.2.10	—
arubanetworks	edgeconnect_sd-wan_orchestrator	9.3.0 – 9.3.6	—
arubanetworks	edgeconnect_sd-wan_orchestrator	9.4.0 – 9.4.4	—
arubanetworks	edgeconnect_sd-wan_orchestrator	>= 9.5.0 < 9.5.6	9.5.6
hewlett_packard_enterprise	edgeconnect_sd-wan_orchestrator	9.4.0 – 9.4.4	—
hewlett_packard_enterprise	edgeconnect_sd-wan_orchestrator	9.5.0 – 9.6.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.