OT
Product
Ontap Tools
by Netapp · last CVE Apr 24, 2025
On CISA KEVExploited in the wildRansomware-linked
29
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 7Low 1
Watch

Add Ontap Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3156
In wildKEV
7.8
100%
Jan 26
Sudo Heap-Based Buffer Overflow Vulnerability
Affected: 9
CVE-2024-6387
8.1
100%
Jul 1
Openssh: regresshion - race condition in ssh allows rce/dos
Affected: 9; 10
CVE-2023-52433
7.8
0%
Feb 20
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction…
Affected: 9; 10
CVE-2025-27820
7.5
1%
Apr 24
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification
Affected: 10
CVE-2024-38286
7.5
2%
Nov 7
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat
Affected: 9; 10
CVE-2024-49761
7.5
1%
Oct 28
REXML is an XML toolkit for Ruby
Affected: 10
CVE-2024-7254
7.5
3%
Sep 19
Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e
Affected: 10
CVE-2024-6119
7.5
67%
Sep 3
Possible denial of service in X.509 name checks
Affected: 9
CVE-2024-39689
7.5
1%
Jul 5
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts
Affected: 10
CVE-2024-34750
7.5
5%
Jul 3
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat
Affected: 9
CVE-2024-28757
7.5
2%
Mar 10
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate)
Affected: 10
CVE-2023-2953
7.5
2%
May 30
A vulnerability was found in openldap
Affected: All versions, or not specified
CVE-2021-28165
7.5
54%
Apr 1
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame
Affected: before 9.10
CVE-2024-0565
7.4
2%
Jan 15
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel
Affected: All versions, or not specified
CVE-2020-13817
7.4
3%
Jun 4
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for…
Affected: All versions, or not specified
CVE-2023-38709
7.3
4%
Apr 4
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Affected: 10
CVE-2024-29131
7.3
2%
Mar 21
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1
Affected: 10
Showing 17