Hpe Aruba Networking Fabric Composer (Afc)
Approved changes feed: RSS · Atom
cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_fabric_composer_(afc):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hewlett Packard Enterprise (Hpe) (b56c5716-cbd3-5c1e-816c-d6416dcfa20e) |
|---|---|
| Product | Hpe Aruba Networking Fabric Composer (Afc) (324c4e33-1c33-5913-92a5-4ad2ae369f03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-23057 |
vulnerable | 2026-06-08 07:10:55.141980 |
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
MEDIUM (5.5)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Published: 2025-01-28T17:12:23.359Z
Updated: 2025-03-13T14:39:29.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23056 |
vulnerable | 2026-06-08 07:10:55.141577 |
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
MEDIUM (5.5)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Published: 2025-01-28T17:11:58.146Z
Updated: 2025-03-13T14:47:58.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23055 |
vulnerable | 2026-06-08 07:10:55.141176 |
Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
MEDIUM (5.5)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
Published: 2025-01-28T17:11:38.749Z
Updated: 2025-03-13T13:39:21.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23054 |
vulnerable | 2026-06-08 07:10:55.140732 |
Authenticated Response Manipulation allows Unauthorized Actions in Management Interface
MEDIUM (6.5)
A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not allowed by their privilege level. Successful exploitation could allow an attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations.
Published: 2025-01-28T17:17:17.694Z
Updated: 2025-03-13T14:27:35.564Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23053 |
vulnerable | 2026-06-08 07:10:55.139668 |
Authenticated privilege escalation via broken access control
MEDIUM (6.5)
A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
Published: 2025-01-28T17:21:45.987Z
Updated: 2025-03-13T18:13:52.965Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.