OT
Product
Ontap Tools
by Netapp · last CVE Apr 24, 2025
On CISA KEVExploited in the wildRansomware-linked
30
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 8Low 1
Watch

Add Ontap Tools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3156
In wildKEV
7.8
100%
Jan 26
Sudo Heap-Based Buffer Overflow Vulnerability
Affected: 9
CVE-2024-6387
8.1
100%
Jul 1
Openssh: regresshion - race condition in ssh allows rce/dos
Affected: 9; 10
CVE-2023-52433
7.8
0%
Feb 20
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction…
Affected: 9; 10
CVE-2025-27820
7.5
1%
Apr 24
Apache HttpComponents: PSL (Public Suffix List) validation bypass
Affected: 10
CVE-2024-38286
7.5
2%
Nov 7
Apache Tomcat: Denial of Service
Affected: 9; 10
CVE-2024-49761
7.5
1%
Oct 28
REXML ReDoS vulnerability
Affected: 10
CVE-2024-7254
7.5
3%
Sep 19
Stack overflow in Protocol Buffers Java Lite
Affected: 10
CVE-2024-6119
7.5
67%
Sep 3
Possible denial of service in X.509 name checks
Affected: 9
CVE-2024-39689
7.5
1%
Jul 5
Certifi removes GLOBALTRUST root certificate
Affected: 10
CVE-2024-34750
7.5
5%
Jul 3
Apache Tomcat: HTTP/2 excess header handling DoS
Affected: 9
CVE-2024-28757
7.5
2%
Mar 10
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate)
Affected: 10
CVE-2023-2953
7.5
2%
May 30
A vulnerability was found in openldap
Affected: All versions, or not specified
CVE-2021-28165
7.5
54%
Apr 1
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame
Affected: before 9.10
CVE-2024-0565
7.4
2%
Jan 15
An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel
Affected: All versions, or not specified
CVE-2020-13817
7.4
3%
Jun 4
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for…
Affected: All versions, or not specified
CVE-2023-38709
7.3
4%
Apr 4
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Affected: 10
CVE-2024-29131
7.3
2%
Mar 21
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1
Affected: 10
Showing 17