Description
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
Affected products
arubanetworks: fabric composer
References1
- support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us… Vendor Advisory
Metrics
- CVSS 3.1
-
7.1
HIGH
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L - EPSS — exploit probability
- 0% percentile: 27 · as of 8 November 2026
- CWE
- CWE-863CWE-269
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.