Unrated severityNVD Advisory· Published Jan 28, 2025· Updated Mar 13, 2025
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
CVE-2025-23056
Description
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Affected products
2- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Fabric Composer (AFC)v5Range: 7.0.0
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.