Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-73700 EUVD-2026-69578GHSA-57wh-vgwm-64qx

Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface

Published Sep 1, 2026 · Updated Sep 2, 2026 · Assigned by hpe

Description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.0.0 – ≤ 7.3.3 —

Advisories 1

References