# Netapp Clustered Data Ontap


- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2015-5477](https://insights.sbomify.com/CVE-2015-5477/): ISC BIND Data Processing Errors (high 7.5, exploited in the wild)
- [CVE-2024-38476](https://insights.sbomify.com/CVE-2024-38476/): Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect (critical 9.8)
- [CVE-2023-27533](https://insights.sbomify.com/CVE-2023-27533/): Command injection in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-32221](https://insights.sbomify.com/CVE-2022-32221/): Use after free in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-32207](https://insights.sbomify.com/CVE-2022-32207/): Misconfiguration in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-31813](https://insights.sbomify.com/CVE-2022-31813/): mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (critical 9.8)
- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2022-23852](https://insights.sbomify.com/CVE-2022-23852/): Integer overflow in n/a (critical 9.8)
- [CVE-2021-39275](https://insights.sbomify.com/CVE-2021-39275/): ap_escape_quotes buffer overflow (critical 9.8)
- [CVE-2021-3711](https://insights.sbomify.com/CVE-2021-3711/): SM2 Decryption Buffer Overflow (critical 9.8)
- [CVE-2020-11984](https://insights.sbomify.com/CVE-2020-11984/): Memory corruption in Apache HTTP Server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/netapp/clustered-data-ontap/