OT
Product
Ontap Tools
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 7Low 1
Watch
Add Ontap Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44228 RansomwareIn wildKEV | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: All versions, or not specified |
| CVE-2024-52533 | 9.8 | Nov 11 | gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character Affected: 10 |
| CVE-2024-1351 | 9.8 | Mar 7 | Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed Affected: 10 |
| CVE-2024-28752 | 9.3 | Mar 15 | A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take… Affected: 10 |
Showing 4