A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could provide insight into internal services and workflows, potentially lowering the barrier to future attacks if combined with other weaknesses.

The vulnerability applies to Hewlett Packard Enterprise's Fabric Composer product. No specific affected version numbers are listed in the CNA data, so all deployments should be considered potentially impacted until a patch or mitigation is applied.

The CVSS score of 3.1 indicates low severity; the EPSS score is not provided, and the vulnerability is not listed in KEV. The likely attack vector is a remote unauthenticated request to an exposed API endpoint. While the low score reflects limited direct impact, the information disclosed could facilitate targeted attacks, so the risk remains non‑negligible for unpatched systems.