[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmBdiDOP3RdMmkVm8k6wlfTwaxnwAVJlnqwx0bEhcfxQ":3,"g5a-risk:CVE-2021-22017":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":54,"references":55,"referencesCount":69,"weaknesses":70,"weaknessesCount":54,"isActivelyExploited":4,"cisaInfo":74,"otxData":26,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2021-22017","What is CVE-2021-22017?","Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.","Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to po...","2021-09-23T13:15:08.207","2025-10-30T20:05:09.117",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,0.49177,[45,45,45,45,45,45,45],"Medium",[49],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"vmware","vcenter_server","6.7","cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",1,[56,62,64],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2021-0020.html","Vmware",[60,61],"Patch","Vendor Advisory",{"url":57,"source":58,"tags":63},[60,61],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017","CISA",[68],"US Government Resource",3,[71],{"id":72,"name":72,"description":73},"Unknown","NVD-CWE-noinfo",{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":26},[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2021-22017? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22017, a medium severity cyber security vulnerability from 2021. High exploit probability (49.2%). Rhttproxy as used in vC...","CVE-2021-22017, CVE-2021-22017 vulnerability, CVE-2021-22017 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, vmware security, vcenter_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-22017",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22017","Cybersecurity","CVE-2021-22017, CVE-2021-22017 vulnerability, CVE-2021-22017 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":26,"Negate":26,"Nodes":103},[104],{"Operator":105,"Negate":44,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E456F84C-A86E-4EA9-9A3E-BEEA662136E6",[],[111,118],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"5579165d-7563-487b-84a5-589216968fad","HIGH_EPSS_DELTA","2025-11-19T04:06:07.415088+00:00","Daily EPSS score increased by 0.104 on 2023-12-30","EPSS Score Increased","red",{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"88228006-5af7-4b34-acea-7ff79bf8ad0b","LOW_EPSS_DELTA","2025-11-22T04:05:54.605229+00:00","Daily EPSS score decreased by 0.104 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":126,"version":37},1792258582505,{"score":128,"band":129,"action":130,"scoredAt":131},81,"High","Emergency patch","2026-10-16T06:52:08.988796+00:00"]