CVE-2025-23055: Arubanetworks Fabric Composer

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

Affected products

• Arubanetworks Fabric Composer: from 7.0.0, before 7.1.1 (fixed in 7.1.1)

Published 2025-01-28. Last modified 2026-06-17.