A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:HArubanetworks Fabric Composer
APPArubanetworks< 7.3.4
Related vulnerabilities
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow...
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an un...
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Comp...
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networ...
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe...