A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HArubanetworks Fabric Composer
APPArubanetworks< 7.3.4
Related vulnerabilities
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networ...
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow...
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Comp...
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authent...
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an un...