5.5
Moyenne
CVE-2025-23055 A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated…
Description
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking Fabric Composer (AFC) 7.0 | 7.0.0 → 7.1.0 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking Fabric Composer (AFC)
Les 5 CVE de HPE Aruba Networking Fabric Composer (AFC) →
CVE-2025-23053
A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric…
6.5
Moyenne
CVE-2025-23054
A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an…
6.5
Moyenne
CVE-2025-23057
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated…
5.5
Moyenne
CVE-2025-23056
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated…
5.5
Moyenne