9.0
Critique
CVE-2026-73700 A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low…
Description
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fabric Composer 7.0 | 7.0.0 → 7.3.3 | Pas de correctif indiqué |
Autres CVE de Fabric Composer
Les 98 CVE de Fabric Composer →
CVE-2026-95776
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…
3.1
Faible
CVE-2026-95777
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer
3.1
Faible
CVE-2026-95775
A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer
3.3
Faible
CVE-2026-95774
A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer
3.7
Faible