{"metadata": {"vulnerability": "cve-2025-21202", "count": 45, "kinds": {"milestone": 9, "sighting": 9, "kev": 0, "other": 27}}, "data": [{"timestamp": "2024-12-05T21:43:30.768Z", "date_only": false, "value": "2024-12-05T21:43:30.768Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-21202", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-21202", "record": "MSRC_CVE-2025-21202", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-21202", "record": "MSRC_CVE-2025-21202", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": true, "value": "2025-01-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0039", "record": "CERTFR-2025-AVI-0039", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-21202", "record": "MSRC_CVE-2025-21202", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-14T00:00:00Z", "date_only": false, "value": "2025-01-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-21202", "record": "MSRC_CVE-2025-21202", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-14T08:00:00Z", "date_only": false, "value": "2025-01-14T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2025-21202", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-14T17:29:48Z", "date_only": false, "value": "2025-01-14T17:29:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "c0780e35-1b1b-4832-b3c5-4d857f6ba1d9", "url": "https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review"}, {"timestamp": "2025-01-14T18:04:19.750Z", "date_only": false, "value": "2025-01-14T18:04:19.750Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-21202", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-14T18:15:31Z", "date_only": false, "value": "2025-01-14T18:15:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8V9J-24JQ-VX9H", "record": "GHSA-8V9J-24JQ-VX9H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-14T18:15:31.827Z", "date_only": false, "value": "2025-01-14T18:15:31.827", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-21202", "record": "FKIE_CVE-2025-21202", "field": "published"}, {"timestamp": "2025-01-14T18:17:10.068Z", "date_only": false, "value": "2025-01-14T18:17:10.068864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucvlfda2n", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "8c5077a6-c08e-43fa-b6dc-49821788d318", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpucvlfda2n"}, {"timestamp": "2025-01-14T18:32:02Z", "date_only": false, "value": "2025-01-14T18:32:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8V9J-24JQ-VX9H", "record": "GHSA-8V9J-24JQ-VX9H", "field": "published"}, {"timestamp": "2025-01-14T18:32:02Z", "date_only": false, "value": "2025-01-14T18:32:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8V9J-24JQ-VX9H", "record": "GHSA-8V9J-24JQ-VX9H", "field": "modified"}, {"timestamp": "2025-01-14T18:41:00.971Z", "date_only": false, "value": "2025-01-14T18:41:00.971236Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113828171633165407", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "1f806530-cd94-40c6-bc97-4e193656ef98", "url": "https://infosec.exchange/users/cve/statuses/113828171633165407"}, {"timestamp": "2025-01-14T19:09:24.429Z", "date_only": false, "value": "2025-01-14T19:09:24.429168Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0010", "record": "NCSC-2025-0010", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-14T19:09:24.429Z", "date_only": false, "value": "2025-01-14T19:09:24.429168Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0010", "record": "NCSC-2025-0010", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-14T19:09:24.429Z", "date_only": false, "value": "2025-01-14T19:09:24.429168Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0010", "record": "NCSC-2025-0010", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-14T23:00:00Z", "date_only": false, "value": "2025-01-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-14T23:00:00Z", "date_only": false, "value": "2025-01-14T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-14T23:00:00Z", "date_only": false, "value": "2025-01-14T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0039", "record": "CERTFR-2025-AVI-0039", "field": "last_revision_date"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0039", "record": "CERTFR-2025-AVI-0039", "field": "initial_release_date"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0039", "record": "CERTFR-2025-AVI-0039", "field": "revisions.0.revision_date"}, {"timestamp": "2025-01-15T16:43:16.784Z", "date_only": false, "value": "2025-01-15T16:43:16.784141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-21202", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-15T16:43:16.784Z", "date_only": false, "value": "2025-01-15T16:43:16.784141Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-21202", "record": "FKIE_CVE-2025-21202", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-15T16:43:26.212Z", "date_only": false, "value": "2025-01-15T16:43:26.212Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-21202", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-15T16:54:38Z", "date_only": false, "value": "2025-01-15T16:54:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1796", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "5412161b-4dea-420d-9a01-7a1aa3ff3dd1", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-21202\n\ud83d\udd39 Description: Windows Recovery Environment Agent Elevation of Privilege Vulnerability\n\ud83d\udccf Published: 2025-01-14T18:04:19.750Z\n\ud83d\udccf Modified: 2025-01-15T16:43:26.212Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21202", "url": "https://t.me/DarkWebInformer_CVEAlerts/1796"}, {"timestamp": "2025-01-15T23:00:00Z", "date_only": false, "value": "2025-01-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-01-19T23:00:00Z", "date_only": false, "value": "2025-01-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-01-23T23:00:00Z", "date_only": false, "value": "2025-01-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-02-23T23:00:00Z", "date_only": false, "value": "2025-02-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-03-24T23:00:00Z", "date_only": false, "value": "2025-03-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-03-25T23:00:00Z", "date_only": false, "value": "2025-03-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-03-25T23:00:00Z", "date_only": false, "value": "2025-03-25T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-26T09:08:12.558Z", "date_only": false, "value": "2025-03-26T09:08:12.558+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0091", "record": "WID-SEC-W-2025-0091", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-14T09:58:36Z", "date_only": false, "value": "2025-11-14T09:58:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59716", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "2a886b3f-67e8-447d-a41b-5325c98efbe7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-12101 is a cross-site scripting (XSS) vulnerability impacting Citrix NetScaler ADC and Citrix NetScaler Gateway appliances when configured in certain roles (Gateway, AAA virtual server)\nURL\uff1ahttps://github.com/7amzahard/CVE-2025-21202-exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/59716"}, {"timestamp": "2025-11-14T15:00:07Z", "date_only": false, "value": "2025-11-14T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "a3edb8ae-6475-44ba-a5c6-a200717f74de"}, {"timestamp": "2026-04-02T00:47:54.441Z", "date_only": false, "value": "2026-04-02T00:47:54.441Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-21202", "record": "MSRC_CVE-2025-21202", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-09T18:29:33.493Z", "date_only": false, "value": "2026-06-09T18:29:33.493Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-21202", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-09T18:29:33.493Z", "date_only": false, "value": "2026-06-09T18:29:33.493Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2025-21202", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:42:45.680Z", "date_only": false, "value": "2026-06-17T08:42:45.680", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-21202", "record": "FKIE_CVE-2025-21202", "field": "lastModified"}, {"timestamp": "2026-07-20T20:00:09.895Z", "date_only": false, "value": "2026-07-20T20:00:09.895951Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2877", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "9a74464b-f2d5-4980-b047-64480ae7c4da", "url": "https://t.me/proxy_bar/2877"}, {"timestamp": "2026-07-21T00:00:27.752Z", "date_only": false, "value": "2026-07-21T00:00:27.752680Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2877", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "20cdba3e-cfe1-4e48-be6d-0243d2930388", "url": "https://t.me/proxy_bar/2877"}, {"timestamp": "2026-07-22T00:00:26.545Z", "date_only": false, "value": "2026-07-22T00:00:26.545755Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2877", "record": "CVE-2025-21202", "field": "creation_timestamp", "uuid": "4d9ef747-6b1f-4283-aada-e82a8edc91ee", "url": "https://t.me/proxy_bar/2877"}]}