CVE-2025-37185 | HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 cross site scripting

January 14, 2026 Yanac

A vulnerability described as problematic has been identified in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0. Affected by this issue is some unknown functionality. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-37185. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More