Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vqf8-5rpg-55xx

Опубликовано: 28 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.5
nvd
около 1 года назад

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.

CVSS3: 5.5
fstec
около 1 года назад

Уязвимость веб-интерфейса управления программного обеспечения для развертывания сети и управления безопасностью HPE Aruba Networking Fabric Composer, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

EPSS

Процентиль: 15%
0.00048
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-79