by Kastro
Paper/Archive/CVE-2026-73700

CVE-2026-73700

Hewlett Packard Enterprise (HPE) Fabric Composer — Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface

EPSS 0.4%CVSS 9.0
critical.is priorityof 100
34
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 36.6.366 × 207.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Affected

ProductAffectedFixed inSource
Fabric Composer7.0.0 – 7.3.3–CNA

Scores by source

hpe (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US