[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe54fXtCaE1Vn0PcFnk5MS9y3pqPCXUG8Ntop6VYrj8w":3,"g5a-risk:CVE-2021-22096":173},{"success":4,"data":5,"meta":171},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":74,"referencesCount":89,"weaknesses":90,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":26,"otxData":26,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":169,"notableEvents":170},"CVE-2021-22096","What is CVE-2021-22096?","In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.","In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause th...","2021-10-28T16:15:07.733","2022-04-28T14:53:08.223",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01352,[39,39,39,39,39,39,39],"Medium",[43,48,53,56,59,62,65,70],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"vmware","spring_framework","*","cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"management_services_for_element_software_and_netapp_hci","cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"metrocluster_tiebreaker","cpe:2.3:a:netapp:metrocluster_tiebreaker:-:*:*:*:*:clustered_data_ontap:*:*",{"vendor":49,"product":60,"version":51,"criteria":61,"vulnerable":4},"snap_creator_framework","cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",{"vendor":49,"product":63,"version":51,"criteria":64,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"oracle","communications_cloud_native_core_console","1.9.0","cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*",{"vendor":66,"product":71,"version":72,"criteria":73,"vulnerable":4},"communications_cloud_native_core_service_communication_proxy","1.15.0","cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*",[75,80,85],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20211125-0005\u002F","Netapp",[79],"Third Party Advisory",{"url":81,"source":82,"tags":83},"https:\u002F\u002Ftanzu.vmware.com\u002Fsecurity\u002Fcve-2021-22096","Vmware",[84],"Vendor Advisory",{"url":86,"source":87,"tags":88},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html","Oracle",[79],3,[91],{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":97,"structure":98},"CWE-117","Improper Output Neutralization for Logs","The product does not neutralize or incorrectly neutralizes output that is written to logs.","This can allow an attacker to forge log entries or inject malicious content into logs.\nLog forging vulnerabilities occur when:","Draft","Base","Simple",1,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2021-22096? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22096, a medium severity cyber security vulnerability from 2021. In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2....","CVE-2021-22096, CVE-2021-22096 vulnerability, CVE-2021-22096 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, vmware security, netapp security, oracle security, spring_framework vulnerability, active_iq_unified_manager vulnerability, management_services_for_element_software_and_netapp_hci vulnerability, metrocluster_tiebreaker vulnerability, snap_creator_framework vulnerability","\u002Fwhat-is\u002Fcve-2021-22096",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22096","Cybersecurity","CVE-2021-22096, CVE-2021-22096 vulnerability, CVE-2021-22096 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128,141,161],{"Operator":26,"Negate":26,"Nodes":129},[130],{"Operator":131,"Negate":26,"CPEMatch":132},"OR",[133,137],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":135,"VersionEndExcluding":26,"VersionEndIncluding":136},"FFA56919-8FEB-4453-AF87-4343F6EC8E87","5.2.0","5.2.17",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":139,"VersionEndExcluding":26,"VersionEndIncluding":140},"0A3FC7B7-D599-4179-8642-FFC05CBF4604","5.3.0","5.3.10",{"Operator":26,"Negate":26,"Nodes":142},[143],{"Operator":131,"Negate":26,"CPEMatch":144},[145,147,150,153,155,157,159],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":146,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F3E0B672-3E06-4422-B2A4-0BD073AEC2A1",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","E8F29E19-3A64-4426-A2AA-F169440267CC",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","B55E8D50-99B4-47EC-86F9-699B67D473CE",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FDAC85F0-93AF-4BE3-AE1A-8ADAF1CDF9AB",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B4A442CC-41F0-4DED-9D3C-89E58826E6A7",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9F4754FB-E3EB-454A-AB1A-AE3835C5350C",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Operator":26,"Negate":26,"Nodes":162},[163],{"Operator":131,"Negate":26,"CPEMatch":164},[165,167],{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DAAB7154-4DE8-4806-86D0-C1D33B84417B",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"175B97A7-0B00-4378-AD9F-C01B6D9FD570",[],[],{"lastModified":11,"cacheTime":172,"version":32},1792348105118,{"score":174,"band":175,"action":176,"scoredAt":177},21,"Low","Monitor","2026-10-16T06:52:22.86453+00:00"]