Vulnerability in NetApp Oncommand Insight

CVE-2022-38733

OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component.

EPSS: 0.005 (41.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H.

Affected products

Netapp Oncommand_insight
N/a Oncommand Insight — versions 7.3.1 through 7.3.14

References

security-alert@netapp.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-38733?: CVE-2022-38733 is a high-severity vulnerability in NetApp Oncommand Insight. CVSS score: 8.6/10. Published 2022-12-20.
How severe is CVE-2022-38733?: High severity. CVSS v3 base score is 8.6 out of 10.