FC
Product
Fabric Composer
57
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 22Low 6
Watch
Add Fabric Composer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73726 | 6.8 | Sep 1 | Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access Affected: before 7.3.4 |
| CVE-2026-73730 | 6.5 | Sep 1 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73729 | 6.5 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73728 | 6.5 | Sep 1 | Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73727 | 6.5 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2025-23054 | 6.5 | Jan 28 | A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23053 | 6.5 | Jan 28 | A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer Affected: 7.0.0 before 7.1.1 |
| CVE-2026-73731 | 6.1 | Sep 1 | Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface Affected: through 7.3.3 |
| CVE-2026-73732 | 5.6 | Sep 1 | Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73735 | 5.4 | Sep 1 | Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73734 | 5.4 | Sep 1 | Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface Affected: through 7.3.3 |
| CVE-2026-73733 | 5.4 | Sep 1 | Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2025-23057 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23056 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23055 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2026-73736 | 5.3 | Sep 1 | Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73737 | 4.8 | Sep 1 | Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File Modification Affected: through 7.3.3 |
| CVE-2026-73738 | 4.7 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73740 | 4.4 | Sep 1 | Local Privilege Escalation in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73739 | 4.4 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73742 | 4.3 | Sep 1 | Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint Affected: through 7.3.3 |
| CVE-2026-73741 | 4.3 | Sep 1 | Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API Affected: through 7.3.3 |
Showing 22