CVE-2022-38732: Netapp Snapcenter

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

Affected products

• Netapp Snapcenter: before 4.7 (fixed in 4.7)

Published 2022-09-29. Last modified 2026-06-17.