Skip to contentSilver Peak Systems, Inc. Unity Orchestrator vulnerabilities
- silver peak systems, inc. unity orchestratorSilver Peak Unity OrchestratorTM subject to path traversal.CVE-2020-12146EPSS 27.6%6.6 Medium
- silver peak systems, inc. unity orchestratorUnauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.CVE-2020-121476.6 Medium
- silver peak systems, inc. unity orchestratorSilver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.CVE-2020-121456.6 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator, 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreIPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentialsCVE-2020-121424.8 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreThe certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validatedCVE-2020-121446.0 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator, 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreThe certificate used to identify Orchestrator to EdgeConnect devices is not validatedCVE-2020-121436.0 Medium