{"metadata": {"vulnerability": "CVE-2021-25297", "count": 47, "kinds": {"milestone": 4, "sighting": 14, "kev": 11, "other": 18}}, "data": [{"timestamp": "2021-01-18T00:00:00Z", "date_only": false, "value": "2021-01-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-25297", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-15T00:00:00Z", "date_only": false, "value": "2021-02-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-25297", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-15T13:15:00Z", "date_only": false, "value": "2021-02-15T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5924-W244-8FXP", "record": "GHSA-5924-W244-8FXP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-15T13:15:00Z", "date_only": false, "value": "2021-02-15T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25297", "record": "GSD-2021-25297", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-15T13:15:12.793Z", "date_only": false, "value": "2021-02-15T13:15:12.793", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25297", "record": "FKIE_CVE-2021-25297", "field": "published"}, {"timestamp": "2021-02-15T16:46:46Z", "date_only": false, "value": "2021-02-15T16:46:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23595", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "b91426c2-2cce-446b-a7c3-651263a2fb3e", "content": "\u203c CVE-2021-25297 \u203c\n\nNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23595"}, {"timestamp": "2021-02-19T00:00:00Z", "date_only": true, "value": "2021-02-19", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-11072", "record": "CNVD-2021-11072", "field": "submitTime"}, {"timestamp": "2021-02-20T00:00:00Z", "date_only": true, "value": "2021-02-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-11072", "record": "CNVD-2021-11072", "field": "openTime"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "timestamps.asserted_at", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-25297", "field": "timestamps.asserted_at", "uuid": "5fd19200-f51e-4ef7-a387-5cedb1bf210e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-25297", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-25297", "record": "GSD-2021-25297", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-25297", "field": "evidence.0.details.added_date", "uuid": "5fd19200-f51e-4ef7-a387-5cedb1bf210e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "evidence.0.details.date_added", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "timestamps.first_seen_at", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-25297", "field": "timestamps.first_seen_at", "uuid": "5fd19200-f51e-4ef7-a387-5cedb1bf210e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "status.status_updated_at", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-25297", "field": "status.status_updated_at", "uuid": "5fd19200-f51e-4ef7-a387-5cedb1bf210e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-25297", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "evidence.0.details.due_date", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-25297", "record": "GSD-2021-25297", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:42:16Z", "date_only": false, "value": "2022-05-24T17:42:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5924-W244-8FXP", "record": "GHSA-5924-W244-8FXP", "field": "published"}, {"timestamp": "2023-02-07T21:54:12Z", "date_only": false, "value": "2023-02-07T21:54:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_configwizards_authenticated_rce.rb", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "2d523da5-d3f4-410c-87ab-f47cbf716d50", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_configwizards_authenticated_rce.rb"}, {"timestamp": "2023-03-01T02:15:00Z", "date_only": false, "value": "2023-03-01T02:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25297", "record": "GSD-2021-25297", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25297.yaml", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "c74aab5d-cba2-4be9-bbd8-b6f0d21119f6", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25297.yaml"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "5fb97ca2-611e-47d9-b3dc-fbed4aad7f42"}, {"timestamp": "2023-12-03T15:31:20Z", "date_only": false, "value": "2023-12-03T15:31:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/967", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "5a6bb75b-8e39-4729-be12-10a23b3a523e", "content": "#ExploitObserverAlert\n\nCVE-2021-25297\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2021-25297. Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.\n\nFIRST-EPSS: 0.888680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/967"}, {"timestamp": "2023-12-13T01:23:21.777Z", "date_only": false, "value": "2023-12-13T01:23:21.777390Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25297", "record": "GSD-2021-25297", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-12-24T20:26:05.329Z", "date_only": false, "value": "2024-12-24T20:26:05.329733Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971221", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "95b03b53-36a7-48ea-ae37-457de683413f", "url": "https://feedsin.space/feed/CISAKevBot/items/2971221"}, {"timestamp": "2025-02-04T19:46:39.479Z", "date_only": false, "value": "2025-02-04T19:46:39.479223Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-25297", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T19:46:39.479Z", "date_only": false, "value": "2025-02-04T19:46:39.479223Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25297", "record": "FKIE_CVE-2021-25297", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "ef042f3d-698f-4f60-89e1-503025649957"}, {"timestamp": "2025-02-23T02:10:29Z", "date_only": false, "value": "2025-02-23T02:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "d8b1147d-f839-4adc-874f-53bba1ec8157"}, {"timestamp": "2025-02-23T04:10:35Z", "date_only": false, "value": "2025-02-23T04:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "81b495ac-a8b5-496b-9945-4cf03c0683b2"}, {"timestamp": "2025-10-21T23:35:27.009Z", "date_only": false, "value": "2025-10-21T23:35:27.009Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-25297", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:02Z", "date_only": false, "value": "2025-10-22T00:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5924-W244-8FXP", "record": "GHSA-5924-W244-8FXP", "field": "modified"}, {"timestamp": "2026-02-02T12:28:27.244Z", "date_only": false, "value": "2026-02-02T12:28:27.244643Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/952943d8-4f61-4024-856e-1f3a7cb62b81", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "bfe0d282-c587-4c3a-b9e1-6b9ae410b4e7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/952943d8-4f61-4024-856e-1f3a7cb62b81"}, {"timestamp": "2026-02-02T12:28:27.244Z", "date_only": false, "value": "2026-02-02T12:28:27.244643Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/952943d8-4f61-4024-856e-1f3a7cb62b81", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "ff82f7d6-4c6c-434b-bb08-5bd77e56b715", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/952943d8-4f61-4024-856e-1f3a7cb62b81"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-25297", "field": "timestamps.recorded_at", "uuid": "0d247ddc-1012-4146-b6c6-6f10b0d2e0ed", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:47:41.091Z", "date_only": false, "value": "2026-06-19T12:47:41.091670Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2904d6db-283a-4a40-8959-d52a0a0c582a", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "7435e031-9dc3-4aa5-833c-3be8c22c7dda", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2904d6db-283a-4a40-8959-d52a0a0c582a"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-25297", "field": "timestamps.recorded_at", "uuid": "5fd19200-f51e-4ef7-a387-5cedb1bf210e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:28.108Z", "date_only": false, "value": "2026-06-23T11:13:28.108202Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5fd19200-f51e-4ef7-a387-5cedb1bf210e", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "07cb61fd-d05b-4ff6-93ab-8436045e27c6", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5fd19200-f51e-4ef7-a387-5cedb1bf210e"}, {"timestamp": "2026-06-23T14:04:54.194Z", "date_only": false, "value": "2026-06-23T14:04:54.194361Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9997f460-c53d-48d4-9c9f-8e5bce1ec1ea", "record": "CVE-2021-25297", "field": "creation_timestamp", "uuid": "67167970-934f-4e0d-954c-09a0134828ef", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9997f460-c53d-48d4-9c9f-8e5bce1ec1ea"}, {"timestamp": "2026-07-05T00:12:51.397Z", "date_only": false, "value": "2026-07-05T00:12:51.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-25297", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:12:25.674Z", "date_only": false, "value": "2026-07-09T00:12:25.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-25297", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:12:25.674Z", "date_only": false, "value": "2026-07-09T00:12:25.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-25297", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T13:39:51.737Z", "date_only": false, "value": "2026-07-09T13:39:51.737", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25297", "record": "FKIE_CVE-2021-25297", "field": "lastModified"}]}