CVE-2026-73731 — Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Manage…

CVE-2026-73731

Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface PUBLISHED

Description (CNA)

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Fabric Composer	affected 7.0.0 through 7.3.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.