CVE-2022-23237

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-232386.5Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less CVE-2022-232394.8Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which CVE-2022-23247.5Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service i CVE-2022-232406.5Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which CVE-2022-232418.1Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could all CVE-2022-232424.2TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Kn CVE-2022-23254.8The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow high CVE-2022-232525.5Microsoft Office Information Disclosure Vulnerability CVE-2022-232536.5Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability CVE-2022-232544.9Microsoft Power BI Information Disclosure Vulnerability CVE-2022-232555.9Microsoft OneDrive for Android Security Feature Bypass Vulnerability CVE-2022-232564.3Azure Data Explorer Spoofing Vulnerability