{"metadata": {"vulnerability": "CVE-2021-21983", "count": 35, "kinds": {"milestone": 5, "sighting": 9, "kev": 5, "other": 16}}, "data": [{"timestamp": "2021-01-04T00:00:00Z", "date_only": false, "value": "2021-01-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-21983", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-30T19:05:12Z", "date_only": false, "value": "2021-03-30T19:05:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ptswarm/18", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "a68d8f4c-5103-4525-a629-1ccbb4f883a1", "content": "VMware fixed CVE-2021-21975 and CVE-2021-21983, which when chained together lead to an unauth RCE in vRealize Operations.\n\nThe vulnerabilities were found by our researcher Egor Dimitrenko.\n\nAdvisory: https://www.vmware.com/security/advisories/VMSA-2021-0004.html", "url": "https://t.me/ptswarm/18"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-230", "record": "CERTFR-2021-AVI-230", "field": "last_revision_date"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-230", "record": "CERTFR-2021-AVI-230", "field": "initial_release_date"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-21983", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21983", "record": "FKIE_CVE-2021-21983", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-230", "record": "CERTFR-2021-AVI-230", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-31T17:50:36Z", "date_only": false, "value": "2021-03-31T17:50:36.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-21983", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-31T18:15:00Z", "date_only": false, "value": "2021-03-31T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4VWX-R658-C2MG", "record": "GHSA-4VWX-R658-C2MG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-31T18:15:00Z", "date_only": false, "value": "2021-03-31T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-21983", "record": "GSD-2021-21983", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-31T18:15:14.723Z", "date_only": false, "value": "2021-03-31T18:15:14.723", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21983", "record": "FKIE_CVE-2021-21983", "field": "published"}, {"timestamp": "2021-04-02T00:00:00Z", "date_only": true, "value": "2021-04-02", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-31932", "record": "CNVD-2021-31932", "field": "submitTime"}, {"timestamp": "2021-04-27T14:28:29Z", "date_only": false, "value": "2021-04-27T14:28:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrops_mgr_ssrf_rce.rb", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "e0a13f49-8b91-4dbc-a54d-812a35558068", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrops_mgr_ssrf_rce.rb"}, {"timestamp": "2021-04-27T16:08:34Z", "date_only": false, "value": "2021-04-27T16:08:34.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2021-21983", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-04-30T00:00:00Z", "date_only": true, "value": "2021-04-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-31932", "record": "CNVD-2021-31932", "field": "openTime"}, {"timestamp": "2022-02-01T17:45:00Z", "date_only": false, "value": "2022-02-01T17:45Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-21983", "record": "GSD-2021-21983", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:45:56Z", "date_only": false, "value": "2022-05-24T17:45:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4VWX-R658-C2MG", "record": "GHSA-4VWX-R658-C2MG", "field": "published"}, {"timestamp": "2022-06-01T02:32:51Z", "date_only": false, "value": "2022-06-01T02:32:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3057", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "ba0e7138-ec91-4e51-8231-994ce4075f28", "content": "#Analytics\n10 most exploited vulnerabilities of the week (March 29 - April 4)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html\nCVE-2021-21975/CVE-2021-21983 - SSRF in VMWare vRealize Operations Manager API\nhttps://t.me/cybersecuritytechnologies/3039\nCVE-2019-8761 - macOS bug that lets attackers execute HTML within a TXT file\nhttps://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-28918 - SSRF in Netmask package\nhttps://t.me/cybersecuritytechnologies/3014\nCVE-2020-25078 - D-Link psw disclosure\nhttps://t.me/cybersecuritytechnologies/3055\nCVE-2021-1656 - Windows tpm.sys Device Driver Information Disclosure\nhttps://t.me/cybersecuritytechnologies/3028", "url": "https://t.me/CyberSecurityTechnologies/3057"}, {"timestamp": "2023-11-17T03:02:04Z", "date_only": false, "value": "2023-11-17T03:02:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/185", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "625cfc58-96e6-4abe-adec-39b5bbf3fe49", "content": "#ExploitObserverAlert\n\nCVE-2021-21983\n\nDESCRIPTION: Exploit Observer has 13 entries related to CVE-2021-21983. Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.\n\nFIRST-EPSS: 0.002480000\nNVD-IS: 5.2\nNVD-ES: 1.2", "url": "https://t.me/arpsyndicate/185"}, {"timestamp": "2023-12-13T01:23:10.899Z", "date_only": false, "value": "2023-12-13T01:23:10.899688Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-21983", "record": "GSD-2021-21983", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:30:23.722Z", "date_only": false, "value": "2024-08-03T18:30:23.722Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-21983", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:09:55Z", "date_only": false, "value": "2024-11-14T06:09:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed3c6513-fe49-499b-8ed8-4257c1abb6f5", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "7a4ef05e-c2dd-4765-9b92-a19842821dd2"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "3868760c-bacc-4286-b0da-ee3cbfcc5a93"}, {"timestamp": "2025-02-23T04:10:34Z", "date_only": false, "value": "2025-02-23T04:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "65f65bc2-4211-409f-b584-b8d9e420d6e8"}, {"timestamp": "2026-08-12T03:55:28.298Z", "date_only": false, "value": "2026-08-12T03:55:28.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-21983", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:28.298Z", "date_only": false, "value": "2026-08-12T03:55:28.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-21983", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T04:21:08Z", "date_only": false, "value": "2026-08-12T04:21:08+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-21983", "field": "timestamps.asserted_at", "uuid": "ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T04:21:08Z", "date_only": false, "value": "2026-08-12T04:21:08+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-21983", "field": "timestamps.first_seen_at", "uuid": "ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T04:21:08Z", "date_only": false, "value": "2026-08-12T04:21:08+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-21983", "field": "status.status_updated_at", "uuid": "ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T04:21:08.411Z", "date_only": false, "value": "2026-08-12T04:21:08.411Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-21983", "field": "evidence.0.details.added_date", "uuid": "ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T05:00:01Z", "date_only": false, "value": "2026-08-12T05:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-21983", "field": "timestamps.recorded_at", "uuid": "ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T05:00:26.594Z", "date_only": false, "value": "2026-08-12T05:00:26.594977Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/223462f4-0bb4-43c9-b84b-86b582fd33b5", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "d64a5184-5931-4f79-9865-ed77ec1e418a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/223462f4-0bb4-43c9-b84b-86b582fd33b5"}, {"timestamp": "2026-08-12T05:00:26.596Z", "date_only": false, "value": "2026-08-12T05:00:26.596866Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ac9c87c3-9462-4c96-bee4-a6e99eb210ee", "record": "CVE-2021-21983", "field": "creation_timestamp", "uuid": "f93b95d2-4f1a-420c-9a87-f463e6a830c6", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ac9c87c3-9462-4c96-bee4-a6e99eb210ee"}, {"timestamp": "2026-08-12T05:17:36.347Z", "date_only": false, "value": "2026-08-12T05:17:36.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21983", "record": "FKIE_CVE-2021-21983", "field": "lastModified"}, {"timestamp": "2026-08-12T06:30:34Z", "date_only": false, "value": "2026-08-12T06:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4VWX-R658-C2MG", "record": "GHSA-4VWX-R658-C2MG", "field": "modified"}]}