# Netapp 7-Mode Transition Tool


- [CVE-2016-8735](https://insights.sbomify.com/CVE-2016-8735/): Apache Tomcat Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2020-14583](https://insights.sbomify.com/CVE-2020-14583/): Other in Java (high 8.3)
- [CVE-2020-14664](https://insights.sbomify.com/CVE-2020-14664/): Code injection in Java (high 8.3)
- [CVE-2020-2803](https://insights.sbomify.com/CVE-2020-2803/): Other in Java (high 8.3)
- [CVE-2020-2805](https://insights.sbomify.com/CVE-2020-2805/): Other in Java (high 8.3)
- [CVE-2023-28709](https://insights.sbomify.com/CVE-2023-28709/): Apache Tomcat: Fix for CVE-2023-24998 is incomplete (high 7.5)
- [CVE-2022-34169](https://insights.sbomify.com/CVE-2022-34169/): Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets (high 7.5)
- [CVE-2022-21449](https://insights.sbomify.com/CVE-2022-21449/): Other in Java SE JDK and JRE (high 7.5)
- [CVE-2020-2816](https://insights.sbomify.com/CVE-2020-2816/): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (high 7.5)
- [CVE-2016-1000338](https://insights.sbomify.com/CVE-2016-1000338/): In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate (high 7.5)
- [CVE-2023-21930](https://insights.sbomify.com/CVE-2023-21930/): Other in Java SE JDK and JRE (high 7.4)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/7-mode-transition-tool/