CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the web-based management interface of HPE Networking Fabric Composer, allowing authenticated low-privilege users to perform stored cross-site scripting (XSS) attacks against administrative users. This could enable attackers to execute arbitrary script code in the context of the affected interface, potentially compromising sensitive information and administrative controls. Organizations using this product, particularly those with multiple user roles, should prioritize remediation to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)