CVE-2022-38732

CWE-3583 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 48.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp Snapcenter
Timeline
PublishedSep 29
Latest updateSep 30

Description

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5snapcenterprior to 4.7

🔴Vulnerability Details

2
GHSA
GHSA-76c5-fpfr-hgf7: SnapCenter versions prior to 4↗2022-09-30
▶
CVEList
CVE-2022-38732: SnapCenter versions prior to 4↗2022-09-29
▶
CVE-2022-38732 (HIGH CVSS 7.5) | SnapCenter versions prior to 4.7 sh | cvebase.io