Medium severity5.5NVD Advisory· Published Jan 28, 2025· Updated Jun 17, 2026
CVE-2025-23056
CVE-2025-23056
Description
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Affected products
3- cpe:2.3:a:arubanetworks:fabric_composer:*:*:*:*:*:*:*:*Range: >=7.0.0,<7.1.1
- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Fabric Composer (AFC)v5Range: 7.0.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.