CVE-2025-23056
28.01.2025, 18:15
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | fabric_composer | 7.0.0 ≤ 𝑥 < 7.1.1 |
𝑥
= Vulnerable software versions