CVE-2025-37185
MED 5.5Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface and thereby make unauthorized arbitrary configuration changes to the host.
Affected Applications in Environment
16
Edge
vWindows 10 (17.51567.0)
1 device
Edge
v145.0.3800.70 (144.0.3719.115)
1 device
Edge
vWindows 11 (26.57293.0)
1 device
Edge
vWindows 11 (26.57373.0)
1 device
Edge
v142.0.3595.80 (142.3595.25111280)
1 device
Edge
vWindows 11 (1) (18.53621.0)
1 device
Edge
v142.0.3595.53 (142.3595.25103053)
1 device
Edge
v146.0.3856.84 (146.0.3856.59)
1 device
orc
v0.4.31-8.el9
27 devices
orc
v0.4.26-1.el7
1 device
orc
v0.4.28-4.el8_10
3 devices
orc
v0.4.31-8.el9
1 device
orc
v0.4.28-4.el8_10
1 device
orc
v0.4.31-8.el9
2 devices
orc
v0.4.31-8.el9
1 device
orc
v0.4.28-3.el8
2 devices
Affected Devices
45
MacBookPro.home.local
Mac
YETCmainlabiMac2.local
Mac
a00364575-C02DX7850KPF
Mac
a01841079-LK4T0Y7FP4
Mac
a02038137-Q1J07Y3V07
Mac
a02342780-LW4N9LXXPX
Mac
cehsadmin's MacBook Pro-C02CK7K4MD6M
Mac
chela03
Linux
chela04
Linux
chela05
Linux
dpapsb-161390.aggies.usu.edu
Linux
dpapsb-191594.mypc.usu.edu
Linux
el103-02.ece.usu.edu
Linux
el103-03.ece.usu.edu
Linux
el103-04.ece.usu.edu
Linux
el103-05.ece.usu.edu
Linux
el103-07.ece.usu.edu
Linux
el103-08.ece.usu.edu
Linux
el103-09.ece.usu.edu
Linux
el103-10.ece.usu.edu
Linux
el103-14.ece.usu.edu
Linux
el103-15.ece.usu.edu
Linux
el103-16.ece.usu.edu
Linux
el103-17.ece.usu.edu
Linux
el103-18.ece.usu.edu
Linux
el103-19.ece.usu.edu
Linux
el103-20.ece.usu.edu
Linux
el120-01.ece.usu.edu
Linux
el120-02.ece.usu.edu
Linux
el120-03.ece.usu.edu
Linux
el120-04.ece.usu.edu
Linux
el120-05.ece.usu.edu
Linux
el120-06.ece.usu.edu
Linux
el120-08.ece.usu.edu
Linux
el120-09.ece.usu.edu
Linux
el120-10.ece.usu.edu
Linux
el120-11.ece.usu.edu
Linux
el120-12.ece.usu.edu
Linux
el120-14.ece.usu.edu
Linux
eprocdev.banner.usu.edu
Linux
facreadyprod.pplant.usu.edu
Linux
facreadytestrhel.pplant.usu.edu
Linux
facshibsp2.pplant.usu.edu
Linux
guru.cluster
Linux
paymentworksdev.banner.usu.edu
Linux