Sd Wan Edge

Vendor:

First CVE: Apr 25, 2019 · Active for 7 years

25
Total CVEs
More Total CVEs than 96% of tracked products
6.3
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 44% of tracked products
8.0%
KEV Rate
Higher KEV Rate than 98% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Sd Wan Edge over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 25, 2019
7 years ago
Most Recent CVE
Apr 1, 2022
1,579 days ago

CVE Severity & Scoring

Sd Wan Edge25 CVEs
All CVEs353,173 CVEs
LowMediumHighCritical
Attack Vector
Local4 (16.0%)
Network17 (68.0%)
Unknown0 (0.0%)
Physical3 (12.0%)
Adjacent Network1 (4.0%)
Attack Complexity
Low23 (92.0%)
High2 (8.0%)
Unknown0 (0.0%)
User Interaction
None24 (96.0%)
Unknown0 (0.0%)
Required1 (4.0%)
Privileges Required
Low6 (24.0%)
High0 (0.0%)
None19 (76.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (25 CVEs).

25 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-22963CRITICAL
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r
Apr 1, 20229.899YESYES
CVE-2022-22965CRITICAL
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run
Apr 1, 20229.898YESYES
CVE-2021-33037MEDIUM
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the pos
Jul 12, 20215.361NONO
CVE-2020-13943MEDIUM
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connect
Oct 12, 20204.347NONO
CVE-2020-17527HIGH
While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the
Dec 3, 20207.534NONO
CVE-2020-25649HIGH
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The hi
Dec 3, 20207.534NONO
CVE-2019-1010238CRITICAL
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_
Jul 19, 20199.833NONO
CVE-2020-14606CRITICAL
Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). Supported versions that are affected are 8.2 and 9.0. Easily expl
Jul 15, 202010.031NONO
CVE-2020-35491HIGH
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSo
Dec 17, 20208.130NONO
CVE-2020-36518HIGH
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Mar 11, 20227.528NONO
View all 25 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (25 CVEs).

CISA KEV
2 CVEs
8.0% of CVEs· 98th percentile
Metasploit
2 CVEs
8.0% of CVEs· 97th percentile
Nuclei
2 CVEs
8.0% of CVEs· 97th percentile
ExploitDB
1 CVE
4.0% of CVEs· 85th percentile

Social Chatter

Signals from CVEs in this product scope (25 CVEs).

Media Mentions

Signals from CVEs in this product scope (25 CVEs).

Top CNAs Publishing CVEs For Sd Wan Edge

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.187.738.8%22
9.0137.632.5%22
8.2156.83.7%00
8.129.33.5%00
8.029.33.5%00
7.329.33.5%00