CVE-2026-73731: Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Affected Software
Event History
Frequently Asked Questions
What interaction is needed for exploitation?
The attack does not require attacker authentication, but it requires user interaction. A user of the web-based management interface must be induced to trigger the reflected XSS payload.
What is the expected impact if exploitation succeeds?
An attacker can execute arbitrary script in the victim's browser in the context of the affected management interface. The supplied vector indicates limited confidentiality and integrity impact, with no availability impact.