[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqRBl1s5OPgzvfbv0U-k4ndxx0kcQyghm9qWHZ2WDhgk":3,"g5a-risk:CVE-2021-22939":233},{"success":4,"data":5,"meta":231},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":85,"references":86,"referencesCount":126,"weaknesses":127,"weaknessesCount":136,"isActivelyExploited":137,"cisaInfo":26,"otxData":26,"relatedBlogPosts":138,"seoMetadata":139,"configurations":164,"relatedVendorCves":222,"notableEvents":223},"CVE-2021-22939","What is CVE-2021-22939?","If the Node.js https API was used incorrectly and \"undefined\" was in passed for the \"rejectUnauthorized\" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.","If the Node.js https API was used incorrectly and \"undefined\" was in passed for the \"rejectUnauthorized\" parameter, no error was returned and connections to ...","2021-08-16T19:15:13.897","2024-01-05T10:15:09.86",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,10,2.9,0.1473,[38,38,38,38,38,38,38],"Medium",[42,47,52,55,58,61,65,68,71,76,80],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"nodejs","node.js","*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"oracle","graalvm","20.3.3","cpe:2.3:a:oracle:graalvm:20.3.3:*:*:*:enterprise:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"21.2.0","cpe:2.3:a:oracle:graalvm:21.2.0:*:*:*:enterprise:*:*:*",{"vendor":48,"product":56,"version":45,"criteria":57,"vulnerable":4},"jd_edwards_enterpriseone_tools","cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",{"vendor":48,"product":59,"version":45,"criteria":60,"vulnerable":4},"mysql_cluster","cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",{"vendor":48,"product":62,"version":63,"criteria":64,"vulnerable":4},"peoplesoft_enterprise_peopletools","8.57","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",{"vendor":48,"product":62,"version":66,"criteria":67,"vulnerable":4},"8.58","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",{"vendor":48,"product":62,"version":69,"criteria":70,"vulnerable":4},"8.59","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":74,"criteria":75,"vulnerable":4},"netapp","nextgen_api","-","cpe:2.3:a:netapp:nextgen_api:-:*:*:*:*:*:*:*",{"vendor":77,"product":78,"version":45,"criteria":79,"vulnerable":4},"siemens","sinec_infrastructure_network_services","cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":83,"criteria":84,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",11,[87,93,99,103,108,112,116,120,123],{"url":88,"source":89,"tags":90},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-389290.pdf","Siemens",[91,92],"Patch","Third Party Advisory",{"url":94,"source":95,"tags":96},"https:\u002F\u002Fhackerone.com\u002Freports\u002F1278254","Hackerone",[97,98,92],"Exploit","Issue Tracking",{"url":100,"source":101,"tags":102},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F10\u002Fmsg00006.html","Debian",[98,92],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fnodejs.org\u002Fen\u002Fblog\u002Fvulnerability\u002Faug-2021-security-releases\u002F","Nodejs",[91,107],"Vendor Advisory",{"url":109,"source":110,"tags":111},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-02","Gentoo",[],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210917-0003\u002F","Netapp",[92],{"url":117,"source":118,"tags":119},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html","Oracle",[91,92],{"url":121,"source":118,"tags":122},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html",[91,92],{"url":124,"source":118,"tags":125},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[91,92],9,[128],{"id":129,"name":130,"description":131,"extendedDescription":132,"status":133,"abstraction":134,"structure":135},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":140,"metaDescription":141,"keywords":142,"canonicalUrl":143,"structuredData":144},"What is CVE-2021-22939? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22939, a medium severity cyber security vulnerability from 2021. If the Node.js https API was used incorrectly and \"undefi...","CVE-2021-22939, CVE-2021-22939 vulnerability, CVE-2021-22939 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, nodejs security, oracle security, netapp security, siemens security, node.js vulnerability, graalvm vulnerability, jd_edwards_enterpriseone_tools vulnerability, mysql_cluster vulnerability","\u002Fwhat-is\u002Fcve-2021-22939",{"@context":145,"@type":146,"headline":140,"description":141,"datePublished":10,"dateModified":11,"author":147,"publisher":151,"about":155,"mainEntityOfPage":159,"articleSection":162,"keywords":163},"https:\u002F\u002Fschema.org","TechArticle",{"@type":148,"name":149,"url":150},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":148,"name":149,"url":150,"logo":152},{"@type":153,"url":154},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":156,"name":6,"description":157,"additionalType":158},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":160,"@id":161},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22939","Cybersecurity","CVE-2021-22939, CVE-2021-22939 vulnerability, CVE-2021-22939 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[165,183,203,209,216],{"Operator":26,"Negate":26,"Nodes":166},[167],{"Operator":168,"Negate":26,"CPEMatch":169},"OR",[170,174,178],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":172,"VersionEndExcluding":173,"VersionEndIncluding":26},"EACF78A5-3B04-44D7-AC0B-E47D91B6383B","12.0.0","12.22.5",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":176,"VersionEndExcluding":177,"VersionEndIncluding":26},"D7F361B8-E95A-4107-AED1-5933531ABCD2","14.0.0","14.17.5",{"Vulnerable":4,"Criteria":179,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":181,"VersionEndExcluding":182,"VersionEndIncluding":26},"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","59F5CA28-E970-48C4-A406-31667C47F61D","16.0.0","16.6.2",{"Operator":26,"Negate":26,"Nodes":184},[185],{"Operator":168,"Negate":26,"CPEMatch":186},[187,189,191,194,197,199,201],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"53B2BB06-A2F7-4603-89C3-C8500E55483A",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":190,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"01E88C86-8C04-4A4A-BF45-9082AA783056",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":193},"F7137F32-D8B8-4D48-B465-CEB35B085CBE","9.2.6.1",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":196},"E4BE3F5E-DBD8-4682-A262-CAEFC2D9221F","8.0.26",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7E1E416B-920B-49A0-9523-382898C2979D",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":200,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C8AF00C6-B97F-414D-A8DF-057E6BFD8597",{"Operator":26,"Negate":26,"Nodes":204},[205],{"Operator":168,"Negate":26,"CPEMatch":206},[207],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5EE68D2F-B62A-413E-9C14-0797D9C9DD60",{"Operator":26,"Negate":26,"Nodes":210},[211],{"Operator":168,"Negate":26,"CPEMatch":212},[213],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":215,"VersionEndIncluding":26},"B0F46497-4AB0-49A7-9453-CC26837BF253","1.0.1.1",{"Operator":26,"Negate":26,"Nodes":217},[218],{"Operator":168,"Negate":26,"CPEMatch":219},[220],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[224],{"id":225,"eventType":226,"eventTime":227,"details":228,"label":229,"color":230},"95dbfaff-950f-4547-90ee-17257a96633a","HIGH_EPSS_DELTA","2026-06-16T04:05:42.962686+00:00","Daily EPSS score increased by 0.146 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":232,"version":32},1792347696897,{"score":234,"band":40,"action":235,"scoredAt":236},42,"Plan remediation","2026-10-16T06:51:48.563791+00:00"]