CVE-2022-38732

7.5 highEPSS 0.7%

High (7.5) in netapp snapcenter. EPSS 0.7% chance of exploitation in the next 30 days.

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-358
Published: 2022-09-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netapp:snapcenter

References

https://security.netapp.com/advisory/NTAP-20220926-0001/
https://security.netapp.com/advisory/NTAP-20220926-0001/

Check your stack JSON