HPE Networking Fabric Composer vulnerabilities

A vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated adjacent attacker to conduct stored XSS against a user. Successful exploit can execute arbitrary script in the victim's browser.

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. An authenticated low-privilege operator can escalate to administrative privileges, leading to complete system compromise.