PatchTheCVEunity orchestrator vulnerabilities and fixes
Recent CVEs affecting unity orchestrator, with upgrade or downgrade steps. 6 tracked.
Also searched as: unityorchestrator.
unity orchestrator has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2020-11-05. Highest priority: CVE-2020-12146 (score 48/100).
- CVE-2020-12147 MEDIUM 6.6 DOWNGRADE In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can ma
- CVE-2020-12146 MEDIUM 6.6 DOWNGRADE In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can ac
- CVE-2020-12145 MEDIUM 6.6 DOWNGRADE Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticat
- CVE-2020-12144 MEDIUM 6.0 MITIGATE MITIGATE The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
- CVE-2020-12143 MEDIUM 6.0 MITIGATE MITIGATE The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible
- CVE-2020-12142 MEDIUM 4.8 MITIGATE MITIGATE 1
FAQ
How do I fix unity orchestrator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unity orchestrator being exploited right now?
None of the tracked unity orchestrator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unity orchestrator CVE should I patch first?
CVE-2020-12146 currently ranks highest (48/100): In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can ac.