Skip to main content

Knowledge Base

1. Sign in
1. English
NetApp.com

BlueXP

Instaclustr

Learn

Support

Documentation

Knowledge Base

Learning Services

Browse

Community

Hardware Universe

Partner Hub

All Products
Support Bulletins
- Sign in to view Support Bulletins
Videos

Knowledge Base

Search site

Search

Go back to previous article

Search

Search

No headers

Filter results by:
- On Premises (1)
- - Category
  - Guide
  - Topic
  - How-to
  - Reference
- - Azure NetApp Files
  - StorageGRID Webscale
  - Cloud Manager
  - Cloud Sync
  - Cloud Tiering
  - Cloud Volumes ONTAP (CVO)
  - Virtual File Manager
  - E-Series SANtricity Cloud Connector
  - MetroCluster
  - SnapCenter
  - SnapManager
  - SnapProtect
  - 7-Mode Transition Tool
  - Trident Kubernetes
  - Trident Openshift
  - AltaVault OST Plug-in
  - Active IQ Unified Manager
  - E-Series SANtricity Management Software
  - Data ONTAP 8 7-mode
  - Data ONTAP DSM for Windows MPIO
  - Inventory Collect Tool
  - E-Series SANtricity Management Plug-ins
  - NetApp In-Place Analytics Module
  - E-Series SANtricity OS Controller Software
  - NetApp Manageability SDK
  - E-Series SANtricity SMI-S Provider
  - E-Series SANtricity Storage Manager
  - E-Series SANtricity Unified Manager
  - NetApp Plug In for Symantec NetBackup
  - E-Series SANtricity Web Services Proxy
  - Element Plug-in for vCenter Server
  - NetApp Recovery Manager for Citrix ShareFile
  - Element SDK
  - Element Software
  - FC Host Attach Kit
  - Factory Configured Cluster
  - Host Utilities
  - MAX Data
  - Management services for Element Software and NetApp HCI
  - NDMP Cloud Extension Software (NCE)
  - NetApp Connect
  - NetApp Service Level Manager (NSLM)
  - NetApp Host Agent
  - NetApp Integrated EVO:RAIL Solution
  - NetApp NFS Plug-in for VMware VAAI
  - NetApp SMI-S Provider
  - OnCommand API Services (API-S)
  - NetApp XCP
  - SnapManager for Microsoft SQL Server
  - ONTAP 9
  - OnCommand Insight
  - ONTAP Select
  - SnapManager for Microsoft SharePoint
  - OnCommand Insight Connector for BMC
  - ONTAP Select Deploy Upgrade
  - SnapManager for Oracle
  - ONTAP Select Image Install
  - OnCommand Plug-in for Microsoft
  - SnapManager for SAP
  - ONTAP Select Node Upgrade
  - ONTAP System Manager
  - Open Systems SnapVault (OSSV)
  - SnapManager for Virtual Infrastructure
  - ReplicatorX
  - OnCommand Unified Manager Core Package
  - SecureShare Quota Manager
  - OnCommand Workflow Automation (WFA)
  - SnapMirror
  - Single Mailbox Recovery (SMBR)
  - H Series
  - Snap Creator Framework
  - SnapMirror for Open Systems
  - SnapDrive for Microsoft SQL Server 2000
  - SF Series
  - SteelStore
  - SnapDrive for Oracle
  - FC Series
  - SnapDrive for UNIX
  - Storage Services Connector
  - SnapDrive for Windows
  - TDPS
  - FlexPod with Infrastructure Automation
  - SnapManager for Hyper-V
  - SolidFire Storage Replication Adapter
  - Virtual Storage Console for VMware vSphere
  - SolidFire VSS Provider
  - SnapManager for Microsoft Exchange Server
  - SolidFire vRO
  - iSCSI Host Attach Kit
  - FAS Systems
  - NetApp Converged Systems Advisor
  - EF Flash Array
  - iSCSI Initiator Support Kit
  - NetApp HCI
  - E-Series Systems
  - AFF Series
  - StorageGRID
  - AltaVault
  - V Series/ FlexArray
  - Storage Acceleration Appliance (SA)
  - Fabric, Interconnect and Management Switches
  - E-Series Disk Shelves
  - Disk Shelves
  - DTA
  - OnCommand Unified Manager
  - Data ONTAP 7
  - SaaS Backup
  - SnapRestore
  - SnapDiff
  - SnapLock
  - NDMP
  - Disk drives
  - SolidFire Chassis
  - OnCommand System Manager
  - System Manager
  - ONTAP Storage Replication Adapter
  - NetApp VASA Provider
  - Openstack
  - OnCommand Insight Data Warehouse
  - Cloud Volume Service (CVS)
  - Global File Cache
  - Clustered Data Ontap 8
  - Astra
  - SolidFire Enterprise SDS
  - Active IQ Digital Advisor
  - Third Party
  - FSX-ONTAP
  - Astra Trident
  - Cloud Backup Service
  - Keystone
  - ONTAP Mediator
  - ONTAP Antivirus Connector
  - MetroCluster Tiebreaker
  - Asa r2
  - Data Infrastructure Insights
- - Cloud
  - Core
  - DP
  - ESG
  - HCI
  - HW
  - MetroCluster
  - NAS
  - OCI
  - OM
  - PERF
  - SAN
  - SGRID
  - SNAPx
  - SolidFire
  - VIRT
  - Tools
  - Brocade
  - GlobalOPS
  - KCSv6
  - Support Bulletin
  - 7dot
  - Legacy
  - Keystone
  - BlueXP
  - AltaVault
  - ONTAP Select
  - General Support
  - SmartSolve
  - Structured Problem Solving
  - Internal Misc
  - TSC Internal
  - TSC Playbook
  - CSIB
  - SAM
  - Public Report
  - BlueXP GFC
  - BlueXP Insights
  - ODS
- - Auto Support
  - Case Study
  - Elio
  - IE
  - Others
  - Troubleshooting
  - Solve Loop / Not Evolve Loop
  - Complex Workflow
  - Snippet
  - Resolution Guide
  - Action Plan
  - ARS
- - Yes
  - No
- - Q4 2020
  - Q1 2021
  - Q2 2021
  - Q3 2021
  - Q4 2021
  - Q1 2022
  - Q2 2022
- - Q1 2021
  - Q2 2021
  - Q3 2021
  - Q4 2021
  - Q1 2022
  - Q2 2022
  - Q3 2022
  - Q4 2022
- - Yes
  - Yes, with diag
  - No
  - NA (data collection, info only)
  - Hardware Replacement
  - Non-Resolution KB
- - Rewrite
  - Improvement Needed
  - No Action Required
  - Rewrite Completed
  - Improvement Completed
  - KDE Review Pending
  - KB Team Review Pending
- - Ahmad Moubarak
  - Andy Kiendl
  - Andris Dindzans
  - Akira Ito
  - Andy Cheung
  - Avi Shitrit
  - Brent Roeber
  - Clint Sanderson
  - Cunliang Li
  - David Crosson
  - Doc Poulson
  - Elankavi S
  - Hasnain Hamdani
  - Jason Townsend
  - Jon McGilvra
  - Kada Cherif
  - Ken Mencher
  - Kevin Staats
  - Krishnadas Naduvath
  - Logan Baez
  - Michael Matusie
  - Michelle Ferguson
  - Midhun PS
  - Omar Dinulos
  - Paul Gor
  - Pravin Kumar
  - Rajesh Panda
  - Ramchandra Guda
  - Robert Binder
  - Scott Stanton
  - Sheshanka Srinivasan
  - Tom Addington
  - Tomer Shoshan
  - Vijay Ramamurthy
  - Yannick Gelmo
  - KB Team
  - Aneesha M
  - HariPrakash B
  - Nivitha Mohan
  - Mohan BN
  - Amit Srivatsa
  - Nithya S
  - Michael Helmer
  - Daniel Bradley
  - Leonardo Di Santo Albertali
  - Michael Siemens
  - Martin Boere
  - Daniel Grund
  - Remco Vos
  - Jonathan Williams
  - John Krzesinski
  - van Rhee Jordy
  - Hayato Kurahashi
- - 1
  - 2
  - 3
  - 4
  - 5
  - 6
  - 7
  - 8
  - 9
  - 10
  - 11
- - 1
  - 2
  - 3
  - 4
  - 5
  - 6
  - 7
  - 8
  - 9
- - Internal
  - Partner
  - Customer
  - Public
- - WIP
  - Not Validated
  - Validated
  - Archived
- - Yes
  - No
- - WIP
  - Not Validated
  - Validated
  - Archived
- - Internal
  - Partners
  - Customers
  - Public
- - Experience
  - Compliance
- - True
  - False
- - FY 2025 Q1
  - FY 2025 Q2
  - FY 2025 Q3
  - FY 2025 Q4
  - Never Archive
  - Archived
- - V1
  - V2
- - General
  - Initial Analysis
  - Problem Analysis
  - Coaching
  - Tasks
- - How To
  - Question
  - SB
  - How To Public
  - Solution
  - Solution Public
View attachments
- Content Type
  - Document
  - Image
  - Other

Searching in

All results

About 1 results

CONTAP-86250: NetSparker scan: CSP vulnerabilities in System Manager
https://kb.netapp.com/on-prem/ontap/DM/System_Manager/ONTAP_System_Manager_Issues/CONTAP-86250
Issue CSP related properties in System Manager are set, potential vulnerability to cross-site scripting attacks: unsafe-inline in style-src unsafe-eval in script-src data in img-src

© Copyright 2025 NetApp Knowledge Base
Powered by CXone Expert ®

More in Support
Contact Support
Report an Issue
Provide Feedback
Security Advisories
Support Policies and Offerings

Training
Community
Digital Support Blog
NetApp Neighborhood

Company
Newsroom
Events
NetApp Insight
Customer Stories
Environment, Social, and Governance
Investors
Careers
Contact Us

Sales
Try and Buy
Find A Partner
Partner With NetApp
US Public Sector Contracts
NetApp OnDemand Consumption
Data Visionary Centers

Legal
General Terms and Conditions
Privacy & Cookie Policy
Copyright
Patents
Trademarks
Community Terms of Use
Slavery and Human Trafficking Statement
Accessibility

Resources
Subscriptions
Search NetApp
Knowledge Center
NetApp's Response to the Ukraine Situation

English

Cookie Settings