CVE-2022-23237

6.1 mediumEPSS 0.6%

Medium (6.1) in netapp e-series santricity os controller. EPSS 0.6% chance of exploitation in the next 30 days.

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2022-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:e-series_santricity_os_controller

References

https://security.netapp.com/advisory/NTAP-20220527-0002/
https://security.netapp.com/advisory/NTAP-20220527-0002/

Check your stack JSON