{"vulnerability": "CVE-2021-2205", "sightings": [{"uuid": "b031829c-73a7-4342-9917-3aa2fb7a1094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "content": "", "creation_timestamp": "2025-06-29T00:00:00.000000Z"}, {"uuid": "6a8081b9-9207-43b3-8392-a883767af4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "content": "", "creation_timestamp": "2025-06-01T00:00:00.000000Z"}, {"uuid": "79897a46-d016-4006-b17f-5eb1da3494ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "987d99f3-f4a4-4ba6-9faa-50d15e9066a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "9be195f1-f7fe-4cdb-a77e-5e67ac5c9f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "content": "", "creation_timestamp": "2025-08-21T00:00:00.000000Z"}, {"uuid": "7dbd4daf-235f-45c0-9ce3-70fdee428237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116200818148253024", "content": "", "creation_timestamp": "2026-03-09T19:16:13.584505Z"}, {"uuid": "ee394fcb-1660-49ed-bae0-a7285ec990f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5968446", "content": "", "creation_timestamp": "2026-03-09T20:21:54.820391Z"}, {"uuid": "915fde67-f917-48c2-bded-f8ba0791d5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-df887e70-aaa85e643f2fa245", "content": "", "creation_timestamp": "2026-03-13T15:12:35.298833Z"}, {"uuid": "1780cefe-9138-4452-a119-fa9c9e0c245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://thehackernews.com/2026/03/cisa-flags-solarwinds-ivanti-and.html", "content": "", "creation_timestamp": "2026-03-10T05:17:00.000000Z"}, {"uuid": "cc17b502-a75e-4dd1-a926-43b3de7d193e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mhbup66jae27", "content": "", "creation_timestamp": "2026-03-17T21:03:21.339031Z"}, {"uuid": "19de60b1-a7b7-4232-acc4-79d049782290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0361e2ef-9298-4c7a-82e3-9876dff4863b", "content": "", "creation_timestamp": "2026-03-09T20:00:02.740109Z"}, {"uuid": "d379824c-4f5e-4a63-9277-1cc5a379ce52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "00de366c-f90a-47eb-b3d1-6b79ccd38ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/09/cisa-adds-three-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-03-09T12:00:00.000000Z"}, {"uuid": "7c7e5276-f815-4e99-ae25-1128eed917ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0361e2ef-9298-4c7a-82e3-9876dff4863b", "content": "", "creation_timestamp": "2026-03-09T20:00:02.740109Z"}, {"uuid": "d3a2a2f7-d850-4a71-92fc-d6368d82c66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9432", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054).\n\nhttps://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/", "creation_timestamp": "2022-04-27T17:05:37.000000Z"}, {"uuid": "e370b1eb-8ddd-4aee-81f5-c47a82bbefaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "seen", "source": "https://t.me/poxek/1471", "content": "Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-04T09:00:48.000000Z"}, {"uuid": "3b39264e-3a76-4fc5-b4b3-df04bbd11c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-2205", "type": "seen", "source": "https://t.me/arpsyndicate/2719", "content": "#ExploitObserverAlert\n\nCVE-2021-2205\n\nDESCRIPTION: Exploit Observer has 4 entries related to CVE-2021-2205. Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.7-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized access to critical data or complete access to all Oracle Marketing accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).\n\nFIRST-EPSS: 0.001940000\nNVD-IS: 5.2\nNVD-ES: 3.9", "creation_timestamp": "2024-01-09T06:36:03.000000Z"}, {"uuid": "143c69f6-55dd-475c-9346-05714960b432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/HelixsCrewOfficial/151", "content": "FROM INTERNET\n\n1)DOM XSS through ads\nhttps://hackerone.com/reports/889041\n\n2)IDOR leads to 2fa Bypass\nhttps://medium.com/@arthbajpai277/idor-leads-to-2fa-bypass-3331cec2db64\n\n3)Critical XSS in chrome extension\nhttps://medium.com/@p3rr0x22/critical-xss-in-chrome-extension-b55757a2074\n\n4)Cross Site Port Attack in Wild\nhttps://thehemdeep.medium.com/cross-site-port-attack-in-wild-9d2f6af36455\n\n5)Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/\n\n6)Full SSRF by exporting PDF\nhttps://amakki.me/full-ssrf-by-exporting-pdf-bbe1bfde24c4\n\n7)My Pentest Log -3-\nhttps://hcibo.medium.com/my-pentest-log-3-a0d15eb0de72\n\n8)Day 14, Set Up Environment for Pentesting #100DaysofHacking\nhttps://infosecwriteups.com/day-14-set-up-environment-for-pentesting-100daysofhacking-f8069e91fcd2\n\n9)Jobs in Cybersecurity\nhttps://medium.com/@vijayynot108/jobs-in-cybersecurity-3c609c23ecf6\n\n14)Phishmonger \u2013 Phishing Framework for Pentesters\nhttps://crackcodes.in/2022/01/phishmonger-phishing-framework-for-pentesters/\n\n15)Vulnerability Summary for the Week of January 10, 2022\nhttps://www.cisa.gov/uscert/ncas/bulletins/sb22-017\n\n- Random People", "creation_timestamp": "2022-01-19T02:28:51.000000Z"}, {"uuid": "2d9d16e6-913a-4067-a3a9-dd2445d5434a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "published-proof-of-concept", "source": "https://t.me/hacker_trick/464", "content": "Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053\n\nBypass CVE-2021-41379 patch in Windows 11 and Server 2022 with November 2021\nhttps://github.com/klinix5/InstallerFileTakeOver", "creation_timestamp": "2021-11-22T09:30:27.000000Z"}, {"uuid": "a0f804f8-0d86-496c-bb60-8a6a7623305c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "exploited", "source": "https://t.me/true_secator/6843", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 GreyNoise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SSRF, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 9 \u043c\u0430\u0440\u0442\u0430, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0437 400 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 SSRF \u0432 Zimbra, GitLab, DotNetNuke, VMware, ColumbiaSoft, Ivanti, BerriAI \u0438 OpenBMCS \u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0428\u0410, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0418\u043d\u0434\u0438\u0438, \u042f\u043f\u043e\u043d\u0438\u0438 \u0438 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435, \u043d\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0431\u044b\u043b\u043e \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0418\u0437\u0440\u0430\u0438\u043b\u044e \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u043c.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SSRF: \n- CVE-2017-0929\u00a0(CVSS: 7,5, DotNetNuke), \n- CVE-2020-7796\u00a0(CVSS: 9,8, Zimbra Collaboration Suite, \n- CVE-2021-21973\u00a0(CVSS: 5,3, VMware vCenter, \n- CVE-2021-22054\u00a0(CVSS: 7,5, VMware Workspace ONE UEM), \n- CVE-2021-22175\u00a0(CVSS: 9,8, GitLab CE/EE, \n- CVE-2021-22214\u00a0(CVSS: 8,6) \u0438 CVE-2021-39935\u00a0(CVSS: 7,5, GitLab CE/EE), \n- CVE-2023-5830\u00a0(CVSS: 9,8, ColumbiaSoft DocumentLocator), \n- CVE-2024-6587\u00a0(CVSS: 7,5, BerriAI LiteLLM), \n- CVE-2024-21893\u00a0(CVSS: 8,2, Ivanti Connect Secure),\n- OpenBMCS 2.4\u00a0\u0438 Zimbra Collaboration Suite\u00a0(\u0431\u0435\u0437 CVE).\n\n\u041a\u0430\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 GreyNoise, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SSRF, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0448\u0430\u0431\u043b\u043e\u043d \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439  \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0438\u043b\u0438 \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SSRF \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u0430\u0440\u0442\u044b \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nGreyNoise \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u044b\u0433\u0440\u0430\u043b\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0440\u043e\u043b\u044c \u0432\u00a0\u0443\u0442\u0435\u0447\u043a\u0435 Capital One\u00a0\u0432 2019 \u0433\u043e\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b.", "creation_timestamp": "2025-03-14T15:30:06.000000Z"}, {"uuid": "3abab913-2294-4f2b-8a7e-23a59d073e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22055", "type": "seen", "source": "https://t.me/cibsecurity/40528", "content": "\u203c CVE-2021-22055 \u203c\n\nThe SchedulerServer in Vmware photon allows remote attackers to inject logs through \\r in the package parameter. Attackers can also insert malicious data and fake entries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T00:22:26.000000Z"}, {"uuid": "03cdd64b-8bb7-43d1-8693-86bc865a63bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22050", "type": "seen", "source": "https://t.me/cibsecurity/37603", "content": "\u203c CVE-2021-22050 \u203c\n\nESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-16T20:42:13.000000Z"}, {"uuid": "49bea079-64f0-4a11-b8f7-84e049862dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/cibsecurity/34316", "content": "\u203c CVE-2021-22056 \u203c\n\nVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-21T00:11:45.000000Z"}, {"uuid": "eccbf986-0206-4ffb-80e0-c552ea4a2229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22057", "type": "seen", "source": "https://t.me/cibsecurity/34306", "content": "\u203c CVE-2021-22057 \u203c\n\nVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-21T00:11:32.000000Z"}, {"uuid": "9822c621-3bef-425b-a682-bda577fc846d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "https://t.me/cibsecurity/32701", "content": "\u203c CVE-2021-22053 \u203c\n\nApplications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-19T18:23:23.000000Z"}, {"uuid": "659fc774-ff29-4398-a4c4-48f98427875a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22051", "type": "seen", "source": "https://t.me/cibsecurity/31969", "content": "\u203c CVE-2021-22051 \u203c\n\nApplications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T16:28:33.000000Z"}, {"uuid": "6dee56f9-f322-46ba-ba95-910a65e8022d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1205", "content": "#exploit\n1. CVE-2021-42321:\nExchange Post-Auth RCE\nhttps://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398\n\n2. CVE-2021-22053:\nSpring Cloud Netflix Hystrix Dashboard\ntemplate resolution vulnerability\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053\n\n@BlueRedTeam", "creation_timestamp": "2021-11-22T10:37:29.000000Z"}, {"uuid": "7d389a23-8558-48b4-8633-eef06440d1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/burpsuite/328", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2022-06-17T01:37:28.000000Z"}, {"uuid": "8b266d95-b592-4d47-954c-92e5f84d3863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5961", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2022-01-18T16:20:06.000000Z"}, {"uuid": "039d6be9-8f75-4c27-a651-ddc67a084a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/6207", "content": "Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)\n\nhttps://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/", "creation_timestamp": "2022-04-27T09:49:16.000000Z"}, {"uuid": "021f4634-0aaf-4476-9e84-07ed236f68d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5227", "content": "#Offensive_security\n1. Capturing RDP NetNTLMv2 Hashes:\nAttack details and a Technical How-To Guide\nhttps://www.gosecure.net/blog/2022/01/17/capturing-rdp-netntlmv2-hashes-attack-details-and-a-technical-how-to-guide\n2. Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf", "creation_timestamp": "2022-01-18T12:19:43.000000Z"}, {"uuid": "a7abf3e3-b97a-42c1-9ddb-4e405eab12f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5901", "content": "#Threat_Research\n1. Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)\nhttps://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf\n2. RCE via VirusTotal Platform\nhttps://www.cysrc.com/blog/virus-total-blog", "creation_timestamp": "2022-04-28T11:00:01.000000Z"}, {"uuid": "f84cb984-cc47-4d27-9ee4-bd11453b9139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4809", "content": "#exploit\n1. CVE-2021-42321:\nExchange Post-Auth RCE\nhttps://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398\n\n2. CVE-2021-22053:\nSpring Cloud Netflix Hystrix Dashboard\ntemplate resolution vulnerability\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053", "creation_timestamp": "2021-11-22T11:01:01.000000Z"}, {"uuid": "0c1a54ab-179f-460a-9980-13b254306a3b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fbc21e5a-6a3d-46b5-b296-33cee6f751a4", "content": "", "creation_timestamp": "2026-06-19T12:42:07.853256Z"}, {"uuid": "6ae370fb-0f84-4d74-aa8a-5b763b1e2e83", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "content": "", "creation_timestamp": "2026-06-23T11:12:04.673870Z"}, {"uuid": "62c7472b-338f-42bb-a8c6-77673a300797", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22053", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "content": "", "creation_timestamp": "2026-07-01T05:54:17.921725Z"}, {"uuid": "032ef24f-97c0-4762-8f1d-c8f079a35422", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22054", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/65a133f1-2f3c-40fa-89f1-76f23603321e", "content": "", "creation_timestamp": "2026-07-01T07:18:43.755694Z"}, {"uuid": "d90b9b8a-a9fc-4bf7-8db2-57f2b1c8acfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:00:09.761746Z"}, {"uuid": "ac94b080-39d0-4404-a778-92cedf3bc5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:16.338757Z"}]}