A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04775en_us&docLocale=en_US | Vendor Advisory |
Configurations
History
28 Mar 2025, 19:00
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:arubanetworks:fabric_composer:*:*:*:*:*:*:*:* | |
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04775en_us&docLocale=en_US - Vendor Advisory | |
| First Time |
Arubanetworks fabric Composer
Arubanetworks |
28 Jan 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-28 18:15
Updated : 2025-03-28 19:00
NVD link : CVE-2025-23055
Mitre link : CVE-2025-23055
JSON object : View
Products Affected
arubanetworks
- fabric_composer
CWE
No CWE.