How many silver-peak unity orchestrator CVEs are in CISA KEV?

None of silver-peak unity orchestrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of silver-peak unity orchestrator are affected?

8 distinct silver-peak unity orchestrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in silver-peak unity orchestrator CVEs?

silver-peak unity orchestrator's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-295 (Improper Certificate Validation), CWE-287 (Improper Authentication), CWE-668 (Exposure of Resource to Wrong Sphere).

How many critical silver-peak unity orchestrator vulnerabilities are there?

silver-peak unity orchestrator has 1 critical and 2 high-severity CVEs.

What is the average severity of silver-peak unity orchestrator CVEs?

The average CVSS base score across silver-peak unity orchestrator's scored CVEs is 7.4.

RadicalNotion.AI

Log in Create an account

silver-peak

6 CVEs

silver-peak unity orchestrator Vulnerabilities

Name: silver-peak unity orchestrator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for unity orchestrator by silver-peak.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2020–2020

Last updated November 5, 2020

Overview

silver-peak unity orchestrator has 6 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

Severity and exploitation

How the CVSS severity of silver-peak unity orchestrator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of silver-peak unity orchestrator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No silver-peak unity orchestrator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every silver-peak unity orchestrator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 8.9.11\+3 CVEs
< 8.9.23 CVEs
8.10 <= v < 8.10.11\+3 CVEs
9.0 <= v < 9.0.1\+3 CVEs

Fixed in

8.10.11\+3 CVEs
8.9.11\+3 CVEs
8.9.23 CVEs
9.0.1\+3 CVEs

Find a version

6 CVEs

Sort

High vulnerability · 2020-11-05
CVE-2020-12146
Patch
CWE-22
High · CVSS 8.8
EPSS 27.6% (98th pct)2020-11-05
Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.
CVE-2020-12147
Patch
CWE-22
High · CVSS 8.8
EPSS 1.5% (74th pct)2020-11-05
Critical vulnerability · 2020-11-05
CVE-2020-12145
Patch
CWE-287
Critical · CVSS 9.8
EPSS 6.0% (93th pct)2020-11-05
IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials
CVE-2020-12142
Patch
CWE-668
Medium · CVSS 4.9
EPSS 0.7% (53th pct)2020-05-05
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
CVE-2020-12144
Patch
CWE-295
Medium · CVSS 6.0
EPSS 0.3% (25th pct)2020-05-05
The certificate used to identify Orchestrator to EdgeConnect devices is not validated
CVE-2020-12143
Patch
CWE-295
Medium · CVSS 6.0
EPSS 0.3% (25th pct)2020-05-05

Common weakness types

The CWE weakness categories most often found in silver-peak unity orchestrator CVEs. Follow any weakness for its full explanation.

Other silver-peak products

Browse vulnerabilities for other products by silver-peak.

unity edgeconnect sd-wan7 CVEs unity edgeconnect sd-wan firmware7 CVEs nx-1000 firmware3 CVEs nx-10k firmware3 CVEs nx-11k firmware3 CVEs nx-2000 firmware3 CVEs nx-3000 firmware3 CVEs nx-5000 firmware3 CVEs

All silver-peak vulnerabilities

Frequently asked questions

Common questions about silver-peak unity orchestrator vulnerabilities.

How many CVEs does silver-peak unity orchestrator have?: silver-peak unity orchestrator has 6 published CVE records since 2020.
How many silver-peak unity orchestrator CVEs are in CISA KEV?: None of silver-peak unity orchestrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for silver-peak unity orchestrator vulnerabilities?: No silver-peak unity orchestrator CVEs currently have a tracked public exploit in this dataset.
Which versions of silver-peak unity orchestrator are affected?: 8 distinct silver-peak unity orchestrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in silver-peak unity orchestrator CVEs?: silver-peak unity orchestrator's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-295 (Improper Certificate Validation), CWE-287 (Improper Authentication), CWE-668 (Exposure of Resource to Wrong Sphere).
How many critical silver-peak unity orchestrator vulnerabilities are there?: silver-peak unity orchestrator has 1 critical and 2 high-severity CVEs.
What is the average severity of silver-peak unity orchestrator CVEs?: The average CVSS base score across silver-peak unity orchestrator's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track silver-peak unity orchestrator vulnerabilities

Get an alert for each new silver-peak unity orchestrator CVE, with AI-written analysis and remediation steps.

Create an account See pricing