What’s Vulnerable › Products
NetApp Ontap Tools vulnerabilities
30 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your NetApp Ontap Tools version is affected
Exploited NetApp Ontap Tools vulnerabilities
- CVE-2021-3156 — Sudo Heap-Based Buffer Overflow Vulnerability
- CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
Latest NetApp Ontap Tools vulnerabilities
- CVE-2025-27820 — Apache HttpComponents: PSL (Public Suffix List) validation bypass (CVSS 7.5)
- CVE-2025-0167 — netrc and default credential leak (CVSS 3.4)
- CVE-2024-52533 — (CVSS 9.8)
- CVE-2024-38286 — Apache Tomcat: Denial of Service (CVSS 7.5)
- CVE-2024-49761 — REXML ReDoS vulnerability (CVSS 7.5)
- CVE-2024-47554 — Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader (CVSS 4.3)
- CVE-2024-7254 — Stack overflow in Protocol Buffers Java Lite (CVSS 7.5)
- CVE-2024-8096 — OCSP stapling bypass with GnuTLS (CVSS 6.5)
- CVE-2024-6119 — Possible denial of service in X.509 name checks (CVSS 7.5)
- CVE-2024-39689 — Certifi removes GLOBALTRUST root certificate (CVSS 7.5)
- CVE-2024-39884 — Apache HTTP Server: source code disclosure with handlers configured via AddType (CVSS 6.2)
- CVE-2024-34750 — Apache Tomcat: HTTP/2 excess header handling DoS (CVSS 7.5)
- CVE-2024-6387 — Openssh: regresshion - race condition in ssh allows rce/dos (CVSS 8.1)
- CVE-2024-30171 — (CVSS 5.9)
- CVE-2024-34397 — (CVSS 5.2)
- CVE-2024-24795 — Apache HTTP Server: HTTP Response Splitting in multiple modules (CVSS 6.3)
- CVE-2023-38709 — Apache HTTP Server: HTTP response splitting (CVSS 7.3)
- CVE-2024-29131 — Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator() (CVSS 7.3)
- CVE-2024-26633 — ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (CVSS 5.5)
- CVE-2024-28752 — Apache CXF SSRF Vulnerability using the Aegis databinding (CVSS 9.3)
- CVE-2024-28757 — (CVSS 7.5)
- CVE-2024-1351 — MongoDB Server may allow successful untrusted connection (CVSS 9.8)
- CVE-2023-52433 — netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (CVSS 7.8)
- CVE-2024-0565 — Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client (CVSS 7.4)
- CVE-2023-36054 — (CVSS 6.5)