VYPR
Unrated severityNVD Advisory· Published Jan 28, 2025· Updated Mar 13, 2025

Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface

CVE-2025-23056

Description

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

Affected products

2
  • Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Fabric Composer (AFC)v5
    Range: 7.0.0

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.