Advisories · Technology
Hewlett Packard Enterprise (HPE) Fabric Composer.
Every CVE that names Hewlett Packard Enterprise (HPE) Fabric Composer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.1 Low
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 3.1 Low
Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 3.3 Low
Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 3.7 Low
Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 3.8 Low
Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 4.2 Medium
Authenticated Race Condition in API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 4.3 Medium
Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 4.7 Medium
Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.3 Medium
Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.3 Medium
Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.3 Medium
Unauthenticated Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.3 Medium
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.4 Medium
Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.7 Medium
Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.9 Medium
Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.9 Medium
Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 5.9 Medium
Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.4 Medium
Privilege Escalation Vulnerability in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.5 Medium
Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.5 Medium
Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.5 Medium
Authentication Bypass Vulnerability in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.6 Medium
Authenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 6.8 Medium
Unauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.1 High
Privilege Escalation in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.1 High
Local Privilege Escalation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.4 High
Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.5 High
Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.7 High
Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.8 High
Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 7.8 High
Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.0 High
Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.0 High
Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.1 High
Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.1 High
Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.2 High
Local Privilege Escalation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.3 High
Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.7 High
Improper Certificate Validation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 8.8 High
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 9.6 CriticalCritical · CVSS 9+
Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 9.6 CriticalCritical · CVSS 9+
Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) Fabric Composer
- CVSS 10.0 CriticalCritical · CVSS 9+
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
- CVSS 2.2 Low
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
- CVSS 2.5 Low
Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
- CVSS 3.1 Low
Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Denial of service
- CVSS 3.5 Low
Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Denial of service
- CVSS 3.7 Low
Unauthenticated Information Disclosure Leading to Data Exposure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Weak cryptography or TLS
- CVSS 4.3 Medium
Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
- CVSS 4.3 Medium
Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Broken access control
- CVSS 4.4 Medium
Local Privilege Escalation in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
- CVSS 4.4 Medium
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
- CVSS 4.7 Medium
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
- CVSS 4.8 Medium
Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File Modification
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Path traversal
- CVSS 5.3 Medium
Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure