Skip to content
Sign in
5.5 Medium

CVE-2025-23057 A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated…

Description

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

Affected products and versions

Product Affected versions Fixed in
HPE Aruba Networking Fabric Composer (AFC) 7.0 7.0.0 → 7.1.0 No fix stated

Other CVEs of HPE Aruba Networking Fabric Composer (AFC)

The 5 CVEs of HPE Aruba Networking Fabric Composer (AFC) →
CVE-2025-23053 A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric… 6.5 Medium CVE-2025-23054 A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an… 6.5 Medium CVE-2025-23056 A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated… 5.5 Medium CVE-2025-23055 A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated… 5.5 Medium
Track this CVE