9.0
Critical
CVE-2026-73700 A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low…
Description
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fabric Composer 7.0 | 7.0.0 → 7.3.3 | No fix stated |
Other CVEs of Fabric Composer
The 98 CVEs of Fabric Composer →
CVE-2026-95776
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…
3.1
Low
CVE-2026-95777
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer
3.1
Low
CVE-2026-95775
A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer
3.3
Low
CVE-2026-95774
A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer
3.7
Low