{"metadata": {"vulnerability": "CVE-2021-42237", "count": 73, "kinds": {"milestone": 4, "sighting": 36, "kev": 17, "other": 16}}, "data": [{"timestamp": "2021-10-11T00:00:00Z", "date_only": false, "value": "2021-10-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-42237", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-05T09:51:18Z", "date_only": false, "value": "2021-11-05T09:51:18.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-42237", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-05T10:15:00Z", "date_only": false, "value": "2021-11-05T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J3X5-FR4H-9V7V", "record": "GHSA-J3X5-FR4H-9V7V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-05T10:15:00Z", "date_only": false, "value": "2021-11-05T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-42237", "record": "GSD-2021-42237", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-05T10:15:08.240Z", "date_only": false, "value": "2021-11-05T10:15:08.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-42237", "record": "FKIE_CVE-2021-42237", "field": "published"}, {"timestamp": "2021-11-05T13:25:41Z", "date_only": false, "value": "2021-11-05T13:25:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/31868", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "20f8532b-eee9-4389-894e-5743b200aa41", "content": "\u203c CVE-2021-42237 \u203c\n\nSitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/31868"}, {"timestamp": "2021-11-08T17:26:22Z", "date_only": false, "value": "2021-11-08T17:26:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/10895", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "9fd026b4-0c7f-4923-b6e1-471e66c3e67e", "content": "Sitecore XP RCE flaw patched last month now actively exploited\n\nThe Australian Cyber Security Center (ACSC) is alerting web admins of the active exploitation of CVE-2021-42237, a remote code execution flaw in the Sitecore Experience Platform (Sitecore XP). [...]\n\nhttps://www.bleepingcomputer.com/news/security/sitecore-xp-rce-flaw-patched-last-month-now-actively-exploited/", "url": "https://t.me/BleepingComputer/10895"}, {"timestamp": "2021-11-09T17:50:00Z", "date_only": false, "value": "2021-11-09T17:50:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2299", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "4b6def20-03e4-47a9-8b79-dc710b1a4dfe", "content": "\u200b\u200b\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 (CMS) Sitecore XP \u0438\u043c\u0435\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-42237. \u041f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0442\u0430\u043a\u0438\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a American Express, IKEA, Carnival Cruise Lines, L'Or\u00e9al \u0438 Volvo.\n \n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 13 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Sitecore Experience Platform (Sitecore XP) \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.5 (\u0441 Update-2), 8.0 (\u0441 Update-7), 8.1 (\u0441 Update-3), 8.2 (\u0441 Update-7).\n \n\u0414\u044b\u0440\u044f\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0432 Sitecore XP \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f Report.ashx, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u043e SEO. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043d\u0435\u043b\u044c\u044e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Executive Insight, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 8.0 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Microsoft \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 Silverlight. CVE \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0438\u043c.\n \n\u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 RCE \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Assetnote, \u0447\u0442\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0442\u044c \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n \n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 - Sitecore XP 9.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u0418\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b Report.ashx \u0438\u0437 /sitecore/shell/ClientBin/Reporting/ \u043d\u0430 \u0432\u0441\u0435\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.", "url": "https://t.me/true_secator/2299"}, {"timestamp": "2021-11-15T19:46:09Z", "date_only": false, "value": "2021-11-15T19:46:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sitecore_xp_cve_2021_42237.rb", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "644b485d-0aaa-4b1e-bdcd-e44de470a77f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sitecore_xp_cve_2021_42237.rb"}, {"timestamp": "2021-12-03T21:17:00Z", "date_only": false, "value": "2021-12-03T21:17Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-42237", "record": "GSD-2021-42237", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-01-16T05:26:10Z", "date_only": false, "value": "2022-01-16T05:26:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1346", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "0da7ceae-316b-422d-9349-db065e828bd8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aAn exploit/PoC for CVE-2021-42237\nURL\uff1ahttps://github.com/PinkDev1/CVE-2021-42237", "url": "https://t.me/GithubRedTeam/1346"}, {"timestamp": "2022-01-19T15:20:36Z", "date_only": false, "value": "2022-01-19T15:20:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/632", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "1358f414-1c9d-42c9-ae65-2e06d6cf5232", "content": "windows HTTP RCE CVE-2022-21907\nhttps://github.com/antx-code/CVE-2022-21907\n\nAn exploit / PoC for CVE-2021-42237\nhttps://github.com/PinkDev1/CVE-2021-42237\n\nApache Dubbo Hessian2 CVE-2021-43297 demo\nhttps://github.com/longofo/Apache-Dubbo-Hessian2-CVE-2021-43297", "url": "https://t.me/hacker_trick/632"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "timestamps.asserted_at", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-42237", "field": "timestamps.asserted_at", "uuid": "223e3b40-5245-4033-b7c7-4837e25cdf6e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-42237", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-42237", "record": "GSD-2021-42237", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-42237", "field": "evidence.0.details.added_date", "uuid": "223e3b40-5245-4033-b7c7-4837e25cdf6e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "evidence.0.details.date_added", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "timestamps.first_seen_at", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-42237", "field": "timestamps.first_seen_at", "uuid": "223e3b40-5245-4033-b7c7-4837e25cdf6e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "status.status_updated_at", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-42237", "field": "status.status_updated_at", "uuid": "223e3b40-5245-4033-b7c7-4837e25cdf6e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-42237", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "evidence.0.details.due_date", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-42237", "record": "GSD-2021-42237", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T19:19:52Z", "date_only": false, "value": "2022-05-24T19:19:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J3X5-FR4H-9V7V", "record": "GHSA-J3X5-FR4H-9V7V", "field": "published"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42237.yaml", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "66255d79-2782-4aa2-8630-227d98ced3d4", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42237.yaml"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "ad16d3d6-5812-4fa0-a489-bae14d4bce68"}, {"timestamp": "2023-10-14T17:42:58Z", "date_only": false, "value": "2023-10-14T17:42:58+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-42237", "field": "timestamps.asserted_at", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T17:42:58Z", "date_only": false, "value": "2023-10-14T17:42:58+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-42237", "field": "timestamps.first_seen_at", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:06.146Z", "date_only": false, "value": "2023-12-13T01:23:06.146423Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-42237", "record": "GSD-2021-42237", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-12-24T20:29:32.357Z", "date_only": false, "value": "2024-12-24T20:29:32.357305Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971451", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "ecf68265-e43a-43c5-9b5f-3d976b811c93", "url": "https://feedsin.space/feed/CISAKevBot/items/2971451"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "632e43cb-b604-45c1-a3b6-6f513663e070"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "062456fb-1472-4d84-a45a-234a5cded176"}, {"timestamp": "2025-02-03T14:09:16.771Z", "date_only": false, "value": "2025-02-03T14:09:16.771279Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-42237", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-03T14:09:16.771Z", "date_only": false, "value": "2025-02-03T14:09:16.771279Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-42237", "record": "FKIE_CVE-2021-42237", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T02:39:18Z", "date_only": false, "value": "2025-02-06T02:39:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5Y0knCN-fXFOhaPJz4qVzTuAuDUYhS53bVRpSBSx5MzLMVZM", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "62b8e58b-02cd-4f66-bbb3-7a9d31d5ee1b"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "3c14e84d-10a9-4b92-8969-2e9db008ea30"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "dd6e44d7-4f62-4cb2-a5d5-d09354397c84"}, {"timestamp": "2025-02-23T02:10:32Z", "date_only": false, "value": "2025-02-23T02:10:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "ee6c0e77-2662-4d49-9ef6-cf69fd8efa4d"}, {"timestamp": "2025-02-23T04:10:40Z", "date_only": false, "value": "2025-02-23T04:10:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "d44a468a-72d7-4c96-a347-c7d2a40277ac"}, {"timestamp": "2025-10-21T23:25:27.670Z", "date_only": false, "value": "2025-10-21T23:25:27.670Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-42237", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:25Z", "date_only": false, "value": "2025-10-22T00:32:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J3X5-FR4H-9V7V", "record": "GHSA-J3X5-FR4H-9V7V", "field": "modified"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "dc3a9d8e-de0b-402c-9a9f-9c206e285343"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "faac0fd4-c91b-4fc4-96f0-f35307dd71f2"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "bc166151-a0f1-47b0-91a5-1afad2e31452"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "6f1a56b8-75a9-4b24-96f6-5d86a2d4923e"}, {"timestamp": "2026-02-02T12:27:58.952Z", "date_only": false, "value": "2026-02-02T12:27:58.952319Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0b4854f-c895-4dc5-b1db-dbdd4a5dc7f0", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "de8f1ff2-588f-49b2-8668-477414f4848f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0b4854f-c895-4dc5-b1db-dbdd4a5dc7f0"}, {"timestamp": "2026-02-02T12:27:58.952Z", "date_only": false, "value": "2026-02-02T12:27:58.952319Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0b4854f-c895-4dc5-b1db-dbdd4a5dc7f0", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "b0b24a89-7b31-4413-bb92-cd1e60299c42", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0b4854f-c895-4dc5-b1db-dbdd4a5dc7f0"}, {"timestamp": "2026-06-19T12:47:25.714Z", "date_only": false, "value": "2026-06-19T12:47:25.714688Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67ea1d37-2797-4753-bc38-f4ce02d6a85e", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "55957db2-5ddd-4758-a6a6-c18eef0d1b48", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67ea1d37-2797-4753-bc38-f4ce02d6a85e"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-42237", "field": "timestamps.recorded_at", "uuid": "223e3b40-5245-4033-b7c7-4837e25cdf6e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:44.682Z", "date_only": false, "value": "2026-06-23T11:13:44.682257Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/223e3b40-5245-4033-b7c7-4837e25cdf6e", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "1812c022-c9e2-4034-b1f1-66b83eb01f8f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/223e3b40-5245-4033-b7c7-4837e25cdf6e"}, {"timestamp": "2026-06-23T14:05:13.277Z", "date_only": false, "value": "2026-06-23T14:05:13.277744Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f777756f-f042-4f9a-8f44-ebe73e283087", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "329f28e0-611a-4e46-bffd-378451d9e8cd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f777756f-f042-4f9a-8f44-ebe73e283087"}, {"timestamp": "2026-06-30T09:23:11.494Z", "date_only": false, "value": "2026-06-30T09:23:11.494164Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edba2d8d-e680-463b-9ebc-952d04d81600", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "7d8c50ea-35f3-4192-94aa-96b05d303450", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edba2d8d-e680-463b-9ebc-952d04d81600"}, {"timestamp": "2026-07-01T05:54:17.528Z", "date_only": false, "value": "2026-07-01T05:54:17.528681Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/80ef334d-0a4e-44c4-9227-ff326d5b121f", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "2f687caa-f012-4f52-8df3-240707d29315", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/80ef334d-0a4e-44c4-9227-ff326d5b121f"}, {"timestamp": "2026-07-05T00:04:04.014Z", "date_only": false, "value": "2026-07-05T00:04:04.014Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-42237", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:15:11.203Z", "date_only": false, "value": "2026-07-09T00:15:11.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-42237", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:15:11.203Z", "date_only": false, "value": "2026-07-09T00:15:11.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-42237", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T13:57:14.483Z", "date_only": false, "value": "2026-07-09T13:57:14.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-42237", "record": "FKIE_CVE-2021-42237", "field": "lastModified"}, {"timestamp": "2026-07-26T02:02:36.558Z", "date_only": false, "value": "2026-07-26T02:02:36.558328Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/832", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "76f3be48-62b4-477f-a23e-763e2da15ba8", "url": "https://t.me/EchelonEyes/832"}, {"timestamp": "2026-07-27T00:01:12.551Z", "date_only": false, "value": "2026-07-27T00:01:12.551808Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/832", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "f8755d74-1884-4acb-809b-a25c3d013a6b", "url": "https://t.me/EchelonEyes/832"}, {"timestamp": "2026-07-28T06:00:04.677Z", "date_only": false, "value": "2026-07-28T06:00:04.677455Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/832", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "0192dabb-272e-446d-a34d-258408729060", "url": "https://t.me/EchelonEyes/832"}, {"timestamp": "2026-07-29T00:00:46.540Z", "date_only": false, "value": "2026-07-29T00:00:46.540951Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/832", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "94d10528-f087-43e7-a7d0-a53607ca1ec8", "url": "https://t.me/EchelonEyes/832"}, {"timestamp": "2026-07-29T12:02:51.477Z", "date_only": false, "value": "2026-07-29T12:02:51.477161Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1808", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "a0c59ce9-f7db-412b-88a3-9afca5855590", "url": "https://t.me/reverseame/1808"}, {"timestamp": "2026-07-30T00:02:41.553Z", "date_only": false, "value": "2026-07-30T00:02:41.553080Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1808", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "420183da-1676-4c87-9a93-ec8b8e5cc341", "url": "https://t.me/reverseame/1808"}, {"timestamp": "2026-08-03T04:10:45.367Z", "date_only": false, "value": "2026-08-03T04:10:45.367875Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1808", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "d547dffb-6699-4f0c-8e53-58a088673c0a", "url": "https://t.me/reverseame/1808"}, {"timestamp": "2026-08-04T00:00:50.809Z", "date_only": false, "value": "2026-08-04T00:00:50.809590Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1808", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "867e3141-9dcc-483e-ab78-89bd7aef55ca", "url": "https://t.me/reverseame/1808"}, {"timestamp": "2026-08-04T10:15:11.094Z", "date_only": false, "value": "2026-08-04T10:15:11.094896Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "record": "CVE-2021-42237", "field": "creation_timestamp", "uuid": "3b345244-7eb0-4197-8522-8853ae751af7"}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-42237", "field": "timestamps.last_seen_at", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-42237", "field": "evidence.0.details.observation_date", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-42237", "field": "status.status_updated_at", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T01:00:02Z", "date_only": false, "value": "2026-11-04T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-42237", "field": "timestamps.recorded_at", "uuid": "80ef334d-0a4e-44c4-9227-ff326d5b121f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-42237", "field": "timestamps.recorded_at", "uuid": "010c82b0-1bda-4e95-8d91-83d4aef843fc", "status": {"status_reason": "confirmed", "exploited": true}}]}