Security Advisory

CVE-2025-37122

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-17 19:31:19
Last updated 2025-09-17 19:42:07
Assigner hpe
State PUBLISHED

Description

A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting (XSS) attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victims browser in the context of the affected interface.