How to Fix weak Ciphers

Question

When I crawled my site through https://www.ssllabs.com I found some weak ciphers, which is making my site under at risk. So I want to understand that does weak ciphers should be disabled/removed or they should be updated somewhere.

 

Below are the weak Ciphers I found:

 

TLS 1.2

 

TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)

TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)

 

TLS 1.1

 

TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)

 

TLS 1.0

 

TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)

 

Need your suggestions.