Silver-peak Unity Orchestrator vulnerabilities

• silver peak systems, inc. unity orchestrator Silver Peak Unity OrchestratorTM subject to path traversal. CVE-2020-12146 EPSS 27.6% 6.6 MediumNovember 5, 2020
• silver peak systems, inc. unity orchestrator Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database. CVE-2020-12147 6.6 MediumNovember 5, 2020
• silver peak systems, inc. unity orchestrator Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers. CVE-2020-12145 6.6 MediumNovember 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator,   3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials CVE-2020-12142 4.8 MediumMay 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator  3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated CVE-2020-12144 6.0 MediumMay 5, 2020
• silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator,   3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 more The certificate used to identify Orchestrator to EdgeConnect devices is not validated CVE-2020-12143 6.0 MediumMay 5, 2020