Hewlett Packard Enterprise (HPE) Fabric Composer
52 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76658 | 7.0.0 – 7.3.3 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-76657 | 7.0.0 – 7.3.3 | Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access | CRITICAL 10.0 | 0.7 % | ||
| CVE-2026-73748 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer | LOW 2.2 | 0.2 % | ||
| CVE-2026-73747 | 7.0.0 – 7.3.3 | Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer | LOW 2.5 | 0.1 % | ||
| CVE-2026-73746 | 7.0.0 – 7.3.3 | Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API | LOW 3.1 | 0.3 % | ||
| CVE-2026-73744 | 7.0.0 – 7.3.3 | Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface | LOW 3.5 | 0.3 % | ||
| CVE-2026-73743 | 7.0.0 – 7.3.3 | Unauthenticated Information Disclosure Leading to Data Exposure in HPE Networking Fabric Composer | LOW 3.7 | 0.2 % | ||
| CVE-2026-73742 | 7.0.0 – 7.3.3 | Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-73741 | 7.0.0 – 7.3.3 | Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-73740 | 7.0.0 – 7.3.3 | Local Privilege Escalation in HPE Networking Fabric Composer | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-73739 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-73738 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-73737 | 7.0.0 – 7.3.3 | Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File Modification | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-73736 | 7.0.0 – 7.3.3 | Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-73735 | 7.0.0 – 7.3.3 | Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer API | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-73734 | 7.0.0 – 7.3.3 | Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-73733 | 7.0.0 – 7.3.3 | Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric Composer | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-73732 | 7.0.0 – 7.3.3 | Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer | MEDIUM 5.6 | 0.1 % | ||
| CVE-2026-73731 | 7.0.0 – 7.3.3 | Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-73730 | 7.0.0 – 7.3.3 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73729 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-73728 | 7.0.0 – 7.3.3 | Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-73727 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-73726 | 7.0.0 – 7.3.3 | Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-73725 | 7.0.0 – 7.3.3 | Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer | HIGH 7.0 | 0.1 % | ||
| CVE-2026-73724 | 7.0.0 – 7.3.3 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer | HIGH 7.1 | 0.3 % | ||
| CVE-2026-73723 | 7.0.0 – 7.3.3 | Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface | HIGH 7.1 | 0.4 % | ||
| CVE-2026-73722 | 7.0.0 – 7.3.3 | Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface | HIGH 7.2 | 1.5 % | ||
| CVE-2026-73721 | 7.0.0 – 7.3.3 | Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer | HIGH 7.2 | 0.5 % | ||
| CVE-2026-73720 | 7.0.0 – 7.3.3 | Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API | HIGH 7.2 | 1.1 % | ||
| CVE-2026-73719 | 7.0.0 – 7.3.3 | Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer | HIGH 7.2 | 0.7 % | ||
| CVE-2026-73718 | 7.0.0 – 7.3.3 | Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer | HIGH 7.4 | 0.2 % | ||
| CVE-2026-73717 | 7.0.0 – 7.3.3 | Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface | HIGH 7.5 | 0.8 % | ||
| CVE-2026-73716 | 7.0.0 – 7.3.3 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer | HIGH 7.5 | 0.6 % | ||
| CVE-2026-73715 | 7.0.0 – 7.3.3 | Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer | HIGH 7.5 | 0.6 % | ||
| CVE-2026-73714 | 7.0.0 – 7.3.3 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API | HIGH 7.6 | 0.3 % | ||
| CVE-2026-73713 | 7.0.0 – 7.3.3 | Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer | HIGH 7.8 | 0.1 % | ||
| CVE-2026-73712 | 7.0.0 – 7.3.3 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API | HIGH 8.1 | 0.6 % | ||
| CVE-2026-73711 | 7.0.0 – 7.3.3 | Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API | HIGH 8.1 | 0.5 % | ||
| CVE-2026-73710 | 7.0.0 – 7.3.3 | Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer | HIGH 8.2 | 0.5 % | ||
| CVE-2026-73709 | 7.0.0 – 7.3.3 | Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process | HIGH 8.3 | 0.3 % | ||
| CVE-2026-73708 | 7.0.0 – 7.3.3 | Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer | HIGH 8.3 | 0.4 % | ||
| CVE-2026-73707 | 7.0.0 – 7.3.3 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API | HIGH 8.5 | 0.3 % | ||
| CVE-2026-73706 | 7.0.0 – 7.3.3 | Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes | HIGH 8.6 | 0.5 % | ||
| CVE-2026-73705 | 7.0.0 – 7.3.3 | Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer | HIGH 8.8 | 0.6 % | ||
| CVE-2026-73704 | 7.0.0 – 7.3.3 | Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API | HIGH 8.8 | 0.5 % | ||
| CVE-2026-73703 | 7.0.0 – 7.3.3 | Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface | HIGH 8.8 | 0.3 % | ||
| CVE-2026-73745 | 7.0.0 – 7.3.3 | Unauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric Composer | LOW 3.1 | 0.3 % | ||
| CVE-2026-73702 | 7.0.0 – 7.3.3 | Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer | HIGH 8.8 | 0.4 % | ||
| CVE-2026-73701 | 7.0.0 – 7.3.3 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer | CRITICAL 9.0 | 0.7 % | ||
| CVE-2026-73700 | 7.0.0 – 7.3.3 | Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface | CRITICAL 9.0 | 0.4 % | ||
| CVE-2026-19766 | 7.0.0 – 7.3.3 | Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer | CRITICAL 9.6 | 0.4 % |