https://vulnogram.org/ Most recent CVEs assigned by Silver Peak Systems, Inc. (silver_peak). https://vulnogram.org/seaview/icons/silver_peak.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2020-12148 https://vulnogram.org/CVE-2020-12148 A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacke… Medium Fri, 11 Dec 2020 15:24:23 GMT https://vulnogram.org/CVE-2020-12149 https://vulnogram.org/CVE-2020-12149 The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting comm… Medium Fri, 11 Dec 2020 15:23:32 GMT https://vulnogram.org/CVE-2020-12146 https://vulnogram.org/CVE-2020-12146 In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API. Medium Thu, 05 Nov 2020 18:51:45 GMT https://vulnogram.org/CVE-2020-12147 https://vulnogram.org/CVE-2020-12147 In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing. Medium Thu, 05 Nov 2020 18:50:21 GMT https://vulnogram.org/CVE-2020-12145 https://vulnogram.org/CVE-2020-12145 Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to Orchestrator by introducing an HTTP HOST header set to 127.0.0.1 or loc… Medium Thu, 05 Nov 2020 18:48:31 GMT https://vulnogram.org/CVE-2020-12142 https://vulnogram.org/CVE-2020-12142 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communicatio… Medium Tue, 05 May 2020 19:54:07 GMT https://vulnogram.org/CVE-2020-12144 https://vulnogram.org/CVE-2020-12144 The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal. Medium Tue, 05 May 2020 19:54:00 GMT https://vulnogram.org/CVE-2020-12143 https://vulnogram.org/CVE-2020-12143 The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator. Medium Tue, 05 May 2020 19:53:56 GMT