{"metadata": {"vulnerability": "cve-2021-27104", "count": 51, "kinds": {"milestone": 4, "sighting": 18, "kev": 11, "other": 18}}, "data": [{"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-27104", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-16T20:16:42Z", "date_only": false, "value": "2021-02-16T20:16:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-27104", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-16T20:16:42Z", "date_only": false, "value": "2021-02-16T20:16:42.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-27104", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-02-16T21:15:00Z", "date_only": false, "value": "2021-02-16T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-54W2-M25F-GMQP", "record": "GHSA-54W2-M25F-GMQP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-16T21:15:00Z", "date_only": false, "value": "2021-02-16T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-27104", "record": "GSD-2021-27104", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-16T21:15:13.280Z", "date_only": false, "value": "2021-02-16T21:15:13.280", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27104", "record": "FKIE_CVE-2021-27104", "field": "published"}, {"timestamp": "2021-02-17T00:48:03Z", "date_only": false, "value": "2021-02-17T00:48:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23687", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "630c6d66-cb66-498f-9166-b727ba901b86", "content": "\u203c CVE-2021-27104 \u203c\n\nAccellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23687"}, {"timestamp": "2021-02-17T18:52:00Z", "date_only": false, "value": "2021-02-17T18:52Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-27104", "record": "GSD-2021-27104", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-02-18T00:00:00Z", "date_only": true, "value": "2021-02-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-11054", "record": "CNVD-2021-11054", "field": "submitTime"}, {"timestamp": "2021-02-20T00:00:00Z", "date_only": true, "value": "2021-02-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-11054", "record": "CNVD-2021-11054", "field": "openTime"}, {"timestamp": "2021-02-23T15:58:16Z", "date_only": false, "value": "2021-02-23T15:58:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/7391b143-ed2a-4938-b1eb-1198b56048a3", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "0e617d6b-93a4-40fd-8c47-b89f1be63d3b"}, {"timestamp": "2021-07-29T17:59:02Z", "date_only": false, "value": "2021-07-29T17:59:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/875", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "a1906399-6d32-4a26-aa08-7f2fb1cf4172", "content": "\u200b\u200b\ud83d\ude94 \u0424\u0411\u0420 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a 30 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 2 \u0433\u043e\u0434\u0430\n\nCVE-2021-26855: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26857: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26858: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-27065: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-22893: It is an Improper Authentication vulnerability that is marked as critical\nCVE-2021-22894: It is a buffer overflow vulnerability that enables an attacker to execute arbitrary code\nCVE-2021-22899: It is a command injection vulnerability that enables an attacker to execute remote code\nCVE-2021-22900: It is an Improper Control of Generation of Code vulnerability\nCVE-2021-27101: It is an Improper Neutralization of Special Elements used in an SQL Command\nCVE-2021-27102: It is an Improper Neutralization of Special Elements used in an OS Command\nCVE-2021-27103: It is a Server-Side Request Forgery (SSRF) vulnerability\nCVE-2021-27104: It is an Improper Neutralization of Special Elements used in an OS Command vulnerability\nCVE-2021-21985: It is an Improper Input Validation vulnerability\nCVE-2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory (\u2018Path Traversal\u2019)\nCVE-2020-12812: It is an Improper Authentication vulnerability\nCVE-2019-5591: It is a Missing Authentication for Critical Function vulnerability\nCVE-2019-19781: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2019-11510: It is an Improper Limitation of a Pathname to a Restricted Directory\nCVE 2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2020-5902: It is an Inclusion of Functionality from Untrusted Control Sphere and Improper Limitation of a Pathname to a Restricted Directory vulnerability \nCVE 2020-15505: It is an Insufficient Information vulnerability\nCVE-2017-11882: It is a Microsoft Office Memory Corruption vulnerability that enables an attacker to execute arbitrary code.\nCVE-2019-11580: It is an Insufficient Information vulnerability\nCVE-2018-7600: It is an Improper Input Validation vulnerability\nCVE 2019-18935: It is a Deserialization of Untrusted Data vulnerability\nCVE-2019-0604: It is a Microsoft SharePoint Remote Code Execution Vulnerability\nCVE-2020-0787: It is a Windows Background Intelligent Transfer Service Elevation of Privilege vulnerability\nCVE-2020-1472: It is a Netlogon Elevation of Privilege vulnerability \nCVE-2020-15505: It is an Insufficient Information vulnerability\nCVE-2020-0688: It is a Use of Hard-coded Credentials vulnerability", "url": "https://t.me/Russian_OSINT/875"}, {"timestamp": "2021-10-25T22:32:43Z", "date_only": false, "value": "2021-10-25T22:32:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "00c1b051-0311-4951-83d5-39fece5656aa"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "timestamps.asserted_at", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-27104", "field": "timestamps.asserted_at", "uuid": "ab7f2ccd-b901-4a53-87c0-df3d6891a173", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-27104", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-27104", "record": "GSD-2021-27104", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-27104", "field": "evidence.0.details.added_date", "uuid": "ab7f2ccd-b901-4a53-87c0-df3d6891a173", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "evidence.0.details.date_added", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "timestamps.first_seen_at", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-27104", "field": "timestamps.first_seen_at", "uuid": "ab7f2ccd-b901-4a53-87c0-df3d6891a173", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "status.status_updated_at", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-27104", "field": "status.status_updated_at", "uuid": "ab7f2ccd-b901-4a53-87c0-df3d6891a173", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-27104", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:16Z", "date_only": false, "value": "2021-11-08T08:58:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "555e1058-064a-417a-879b-91d8813a4baa"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "evidence.0.details.due_date", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-27104", "record": "GSD-2021-27104", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "45850c35-da5d-4614-8826-cc451a09b08e"}, {"timestamp": "2022-05-24T17:42:21Z", "date_only": false, "value": "2022-05-24T17:42:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-54W2-M25F-GMQP", "record": "GHSA-54W2-M25F-GMQP", "field": "published"}, {"timestamp": "2023-12-04T15:22:15Z", "date_only": false, "value": "2023-12-04T15:22:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1239", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "e9942b2d-a892-4ad8-bad0-a908d982f1ef", "content": "#ExploitObserverAlert\n\nCVE-2021-27104\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2021-27104. Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.\n\nFIRST-EPSS: 0.007790000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1239"}, {"timestamp": "2023-12-13T01:23:36.200Z", "date_only": false, "value": "2023-12-13T01:23:36.200378Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-27104", "record": "GSD-2021-27104", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T20:40:47.292Z", "date_only": false, "value": "2024-08-03T20:40:47.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-27104", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:25:19.242Z", "date_only": false, "value": "2024-12-24T20:25:19.242513Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971171", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "49b1ffe5-10cf-4945-afb8-fa182bfa2194", "url": "https://feedsin.space/feed/CISAKevBot/items/2971171"}, {"timestamp": "2025-02-23T02:09:54Z", "date_only": false, "value": "2025-02-23T02:09:54.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "2a54a572-6183-4483-9ee2-89328c937899"}, {"timestamp": "2025-04-19T08:05:45Z", "date_only": false, "value": "2025-04-19T08:05:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/7391b143-ed2a-4938-b1eb-1198b56048a3", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "feb29fe2-a7f9-4b58-abfc-4611cc069324"}, {"timestamp": "2025-04-30T04:12:32Z", "date_only": false, "value": "2025-04-30T04:12:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13976", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "89a90cc4-c6d3-4b1c-b36b-5664f4469bb5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-27104\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.\n\ud83d\udccf Published: 2021-02-16T20:16:42.000Z\n\ud83d\udccf Modified: 2025-04-30T03:56:22.233Z\n\ud83d\udd17 References:\n1. https://www.accellion.com/products/fta/\n2. https://github.com/accellion/CVEs/blob/main/CVE-2021-27104.txt", "url": "https://t.me/DarkWebInformer_CVEAlerts/13976"}, {"timestamp": "2025-05-27T17:56:24.718Z", "date_only": false, "value": "2025-05-27T17:56:24.718712Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-27104", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-27T17:56:24.718Z", "date_only": false, "value": "2025-05-27T17:56:24.718712Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27104", "record": "FKIE_CVE-2021-27104", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-21T23:25:54.311Z", "date_only": false, "value": "2025-10-21T23:25:54.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-27104", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:54.311Z", "date_only": false, "value": "2025-10-21T23:25:54.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-27104", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:03Z", "date_only": false, "value": "2025-10-22T00:32:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-54W2-M25F-GMQP", "record": "GHSA-54W2-M25F-GMQP", "field": "modified"}, {"timestamp": "2026-02-02T12:28:33.110Z", "date_only": false, "value": "2026-02-02T12:28:33.110507Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2b20001-9f20-4c35-88ae-7f16d4961147", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "607b0090-93c3-4a99-92f6-d8c0b5dd8160", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2b20001-9f20-4c35-88ae-7f16d4961147"}, {"timestamp": "2026-02-02T12:28:33.110Z", "date_only": false, "value": "2026-02-02T12:28:33.110507Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2b20001-9f20-4c35-88ae-7f16d4961147", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "45968720-a19b-41c5-b6ea-69b9f98838eb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2b20001-9f20-4c35-88ae-7f16d4961147"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-27104", "field": "timestamps.recorded_at", "uuid": "a67d8db0-eecf-48c6-80e4-c53d7830ce43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T03:44:18.213Z", "date_only": false, "value": "2026-06-17T03:44:18.213", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27104", "record": "FKIE_CVE-2021-27104", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:53.596Z", "date_only": false, "value": "2026-06-19T12:47:53.596005Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa183b74-4282-4ed2-87f9-0207af5deada", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "8f56ab14-068c-4850-ac7a-fcc5f2612ca7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa183b74-4282-4ed2-87f9-0207af5deada"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-27104", "field": "timestamps.recorded_at", "uuid": "ab7f2ccd-b901-4a53-87c0-df3d6891a173", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:25.325Z", "date_only": false, "value": "2026-06-23T11:13:25.325628Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ab7f2ccd-b901-4a53-87c0-df3d6891a173", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "fd17055b-6b6b-430c-a69c-1b21e5db213c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ab7f2ccd-b901-4a53-87c0-df3d6891a173"}, {"timestamp": "2026-06-23T14:04:50.179Z", "date_only": false, "value": "2026-06-23T14:04:50.179089Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/37057bb6-506a-4b74-b576-47eb1f286ebe", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "d27a7363-d404-43b3-a26a-a39247fa063c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/37057bb6-506a-4b74-b576-47eb1f286ebe"}, {"timestamp": "2026-07-29T09:00:07.319Z", "date_only": false, "value": "2026-07-29T09:00:07.319483Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/399", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "ebc20a32-7ab0-4eeb-994e-7fd0904fe0a3", "url": "https://t.me/rtinfobez/399"}, {"timestamp": "2026-07-30T00:02:07.368Z", "date_only": false, "value": "2026-07-30T00:02:07.368503Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/399", "record": "CVE-2021-27104", "field": "creation_timestamp", "uuid": "b6015e2b-0cf9-490f-97d3-0ee446e12660", "url": "https://t.me/rtinfobez/399"}]}