PatchTheCVEontap tools vulnerabilities and fixes
Recent CVEs affecting ontap tools, with upgrade or downgrade steps. 8 tracked.
Also searched as: ontaptools.
ontap tools has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-04-24. Highest priority: CVE-2024-6119 (score 61/100).
- CVE-2024-8096 MEDIUM 6.5 UPGRADE MITIGATE When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to
- CVE-2025-27820 HIGH 7.5 UPGRADE DOWNGRADE A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management a
- CVE-2024-6119 HIGH 7.5 UPGRADE MITIGATE Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates
- CVE-2024-49761 HIGH 7.5 UPGRADE DOWNGRADE REXML is an XML toolkit for Ruby
- CVE-2024-39884 MEDIUM 6.2 DOWNGRADE DOWNGRADE A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based config
- CVE-2024-39689 HIGH 7.5 UPGRADE MITIGATE Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates wh
- CVE-2024-38286 HIGH 8.6 UPGRADE DOWNGRADE Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apach
- CVE-2024-34750 HIGH 7.5 UPGRADE DOWNGRADE Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat
FAQ
How do I fix ontap tools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ontap tools being exploited right now?
None of the tracked ontap tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ontap tools CVE should I patch first?
CVE-2024-6119 currently ranks highest (61/100): Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates.