CVE-2023-37440: Arubanetworks Edgeconnect SD-WAN Orchestrator

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful exploit allows an attacker to enumerate information about the internal     structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information.

Affected products

• Arubanetworks Edgeconnect SD-WAN Orchestrator: before 9.3.1 (fixed in 9.3.1)

Published 2023-08-22. Last modified 2026-06-17.