# Netapp Bootstrap Os


- [CVE-2025-24813](https://insights.sbomify.com/CVE-2025-24813/): Apache Tomcat Path Equivalence (critical 10.0, exploited in the wild)
- [CVE-2024-1086](https://insights.sbomify.com/CVE-2024-1086/): Linux Kernel Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2023-4911](https://insights.sbomify.com/CVE-2023-4911/): GNU C Library Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2022-0492](https://insights.sbomify.com/CVE-2022-0492/): Linux Kernel Improper Authentication (high 7.8, exploited in the wild)
- [CVE-2024-56337](https://insights.sbomify.com/CVE-2024-56337/): Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete (critical 9.8)
- [CVE-2024-50379](https://insights.sbomify.com/CVE-2024-50379/): Apache Tomcat: RCE due to TOCTOU issue in JSP compilation (critical 9.8)
- [CVE-2022-32207](https://insights.sbomify.com/CVE-2022-32207/): Misconfiguration in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-2068](https://insights.sbomify.com/CVE-2022-2068/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2024-32487](https://insights.sbomify.com/CVE-2024-32487/): Command injection in n/a (high 8.6)
- [CVE-2024-2398](https://insights.sbomify.com/CVE-2024-2398/): HTTP/2 push headers memory-leak (high 8.6)
- [CVE-2024-6387](https://insights.sbomify.com/CVE-2024-6387/): Openssh: regresshion - race condition in ssh allows rce/dos (high 8.1)
- [CVE-2022-22576](https://insights.sbomify.com/CVE-2022-22576/): Auth bypass in https://github.com/curl/curl (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/bootstrap-os/