Priority MEDIUM 50
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00748 · Published 2026-09-01 · No fix listed CWE-287
Priority MEDIUM 50
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00746 · Published 2026-09-01 · No fix listed CWE-287
Priority MEDIUM 44
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-09-01 · No fix listed CWE-306
Priority MEDIUM 43
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.00381 · Published 2026-09-01 · No fix listed CWE-287
Priority MEDIUM 42
Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00457 · Published 2026-09-01 · No fix listed CWE-306
Priority MEDIUM 42
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00672 · Published 2026-09-01 · No fix listed CWE-94
Priority MEDIUM 41
An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00616 · Published 2026-09-01 · No fix listed CWE-552
Priority MEDIUM 41
A command sanitization bypass exists in the API of HPE Networking Fabric Composer.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00534 · Published 2026-09-01 · No fix listed CWE-77
Priority MEDIUM 41
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administra…
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00423 · Published 2026-09-01 · No fix listed CWE-79
Priority MEDIUM 40
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-09-01 · No fix listed CWE-400
Priority MEDIUM 40
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interfa…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · User interaction · EPSS 0.00338 · Published 2026-09-01 · No fix listed CWE-79
Priority MEDIUM 40
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00417 · Published 2026-09-01 · No fix listed CWE-863
Priority LOW 38
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00644 · Published 2026-09-01 · No fix listed CWE-77
Priority LOW 38
A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00457 · Published 2026-09-01 · No fix listed CWE-269
Priority LOW 38
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of t…
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.00331 · Published 2026-09-01 · No fix listed CWE-77
Priority LOW 38
A business logic vulnerability exists in the API of HPE Networking Fabric Composer.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00415 · Published 2026-09-01 · No fix listed CWE-863
Priority LOW 37
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01451 · Published 2026-09-01 · No fix listed CWE-77
Priority LOW 37
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00338 · Published 2026-09-01 · No fix listed CWE-863
Priority LOW 36
Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01058 · Published 2026-09-01 · No fix listed CWE-73
Priority LOW 36
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if cer…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00831 · Published 2026-09-01 · No fix listed CWE-77
Priority LOW 36
A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if ce…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00639 · Published 2026-09-01 · No fix listed CWE-78
Priority LOW 35
An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate privileges.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00652 · Published 2026-09-01 · No fix listed CWE-73
Priority LOW 35
Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00149 · Published 2026-09-01 · No fix listed CWE-269
Priority LOW 34
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00534 · Published 2026-09-01 · No fix listed CWE-89
Priority LOW 33
A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2026-09-01 · No fix listed CWE-269
Load more