What’s Vulnerable › Products
Silver Peak Systems, Inc. Unity Orchestrator vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Silver Peak Systems, Inc. Unity Orchestrator version is affected
Latest Silver Peak Systems, Inc. Unity Orchestrator vulnerabilities
- CVE-2020-12147 — Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database. (CVSS 8.8)
- CVE-2020-12146 — Silver Peak Unity OrchestratorTM subject to path traversal. (CVSS 8.8)
- CVE-2020-12145 — Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers. (CVSS 9.8)
- CVE-2020-12144 — The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated (CVSS 4.9)
- CVE-2020-12143 — The certificate used to identify Orchestrator to EdgeConnect devices is not validated (CVSS 4.9)
- CVE-2020-12142 — IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials (CVSS 4.9)