CVE-2022-23237 - E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites

Back Back to CVE browser

MEDIUM

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites

Published Jun 1, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.61%

Description

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

Affected products

Vendor n/a Product E-Series SANtricity OS Controller Software 11.x Default
unknown
Affected
- 11.x through 11.70.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	E-Series SANtricity OS Controller Software 11.x	unknown	Affected 11.x through 11.70.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28324
Advisory
https://security.netapp.com/advisory/NTAP-20220527-0002/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28324		Advisory
https://security.netapp.com/advisory/NTAP-20220527-0002/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner netapp

Published Jun 1, 2022

Updated Aug 3, 2024

Reserved Jan 14, 2022

Link CVE-2022-23237

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-23237

Red Hat

No data

ENISA EUVD

Assigner netapp

Published Jun 1, 2022

Updated Aug 3, 2024

Link EUVD-2022-28324

GitHub

No data