← Database

CVE-2025-23055

MEDIUM CVSS: 5.5 Published: 2025-01-28 Modified: 2026-06-17

Description

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

Affected Platforms

Arubanetworks Fabric Composer

Weakness Type

CWE-79

References