Known vulnerabilities in SD-WAN Orchestrator 3.4.2
Vendor:
VMware, Inc
Software:
SD-WAN Orchestrator
Version:
3.4.2
Software CPE:
cpe:2.3:a:vmware:sd-wan_orchestrator:*:*:*:*:*:*:*:*
Website:
https://www.vmware.com
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
5.1.0
4.3.2
5.0.0
5.0.1
4.5.1
5.0.0.0
4.3.1
4.2.2
4.5.0
3.4.6
4.4.0
4.3.0
4.2.1
4.0.2
3.4.5
4.2.0
4.1.1
3.4.4 R344-20201103-GA
3.3.2 3.3.2-GA-20201103
4.1.0 R410-20201028-GA
4.0.1 R401-20201111-GA
4.0.0 R400-20201111-GA
4.1.0
4.0.1
4.0.0
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.3.0
3.2.2
3.2.1
3.1.2
3.1.1
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU48576 - Weak Password Requirements CVE-2020-4001 |
CWE-521 | Medium | - | 20.11.2020 |
SB2020112010 |
||
| #VU48575 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-4003 |
CWE-89 | Medium | 3.3.2 3.3.2-GA-20201103, 3.4.4 R344-20201103-GA, 4.0.1 | 20.11.2020 |
SB2020112009 |
||
| #VU48574 - Improper input validation CVE-2020-4002 |
CWE-20 | Low | 3.3.2 3.3.2-GA-20201103, 3.4.4 R344-20201103-GA, 4.0.1 | 20.11.2020 |
SB2020112009 |
||
| #VU48573 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-4000 |
CWE-22 | Medium | 3.3.2 3.3.2-GA-20201103, 3.4.4 R344-20201103-GA, 4.0.1 | 20.11.2020 |
SB2020112009 |
||
| #VU48572 - Improper Access Control CVE-2020-3985 |
CWE-284 | Medium | 3.3.2 3.3.2-GA-20201103, 3.4.4 R344-20201103-GA | 20.11.2020 |
SB2020112009 |
||
| #VU48571 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-3984 |
CWE-89 | Medium | 3.3.2 3.3.2-GA-20201103, 3.4.4 R344-20201103-GA | 20.11.2020 |
SB2020112009 |