CVE-2022-23236: Netapp E-Series Santricity OS Controller

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users.

Affected products

• Netapp E-Series Santricity OS Controller: from 11.40, up to and including 11.70.2

Published 2022-06-02. Last modified 2026-06-17.