Read the docs

Arubanetworks

Records684All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical106CVSS 9.0–10.0
CVSS high363CVSS 7.0–8.9

Exploited now

Arubanetworks records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

57 records in Fabric Composer · all components

Priority MEDIUM 44

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00456 Published 2026-09-01 No fix listed CWE-306
Priority MEDIUM 42

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00672 Published 2026-09-01 No fix listed CWE-94
Priority MEDIUM 41

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administra…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00423 Published 2026-09-01 No fix listed CWE-79
Priority MEDIUM 40

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interfa…

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.00338 Published 2026-09-01 No fix listed CWE-79
Priority LOW 38

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00644 Published 2026-09-01 No fix listed CWE-77
Priority LOW 38

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of t…

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00331 Published 2026-09-01 No fix listed CWE-77
Priority LOW 37

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01451 Published 2026-09-01 No fix listed CWE-77
Priority LOW 36

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if cer…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00831 Published 2026-09-01 No fix listed CWE-77
Priority LOW 36

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if ce…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00639 Published 2026-09-01 No fix listed CWE-78
Priority LOW 34

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00534 Published 2026-09-01 No fix listed CWE-89
Load more
Open these records in search →