CVE-2025-37181 — HIGH (7.2)

Q: How severe is CVE-2025-37181?

CVE-2025-37181 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-37181?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Edgeconnect Sd-Wan Orchestrator.

Vulnerability Description

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Arubanetworks	Edgeconnect Sd-Wan Orchestrator	>= 9.2.0, <= 9.2.10

Related Weaknesses (CWE)

CWE-89

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04992en_us&docLocalVendor Advisory

FAQ

What is CVE-2025-37181?

CVE-2025-37181 is a vulnerability with a CVSS score of 7.2 (HIGH). Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could a...

How severe is CVE-2025-37181?

CVE-2025-37181 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-37181?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Edgeconnect Sd-Wan Orchestrator.