medium5.5
CVE-2025-23055
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-…
Impact
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Fabric Composer | from 7.0.0 before 7.1.1 |