High · 7.5 CVE-2022-38732 EUVD-2022-41299GHSA-76c5-fpfr-hgf7

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that …

Published Sep 29, 2022 · Updated May 20, 2025 · Assigned by netapp

Description

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented.

Affected products

Vendor	Product	Affected	Fixed
—	SnapCenter	prior to 4.7	—

References

https://security.netapp.com/advisory/NTAP-20220926-0001/