[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmBdiDOP3RdMmkVm8k6wlfTwaxnwAVJlnqwx0bEhcfxQ":3,"g5a-risk:CVE-2021-22017":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":70,"weaknesses":71,"weaknessesCount":55,"isActivelyExploited":4,"cisaInfo":75,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":110,"notableEvents":111},"CVE-2021-22017","What is CVE-2021-22017?","Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.","Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to po...","2021-09-23T13:15:08.207","2025-10-30T20:05:09.117",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,0.47642,[47,47,47,45,45,45,45],0.46715,"Medium",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"vmware","vcenter_server","6.7","cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",1,[57,63,65],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2021-0020.html","Vmware",[61,62],"Patch","Vendor Advisory",{"url":58,"source":59,"tags":64},[61,62],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017","CISA",[69],"US Government Resource",3,[72],{"id":73,"name":73,"description":74},"Unknown","NVD-CWE-noinfo",{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":26},[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2021-22017? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-22017, a medium severity cyber security vulnerability from 2021. High exploit probability (47.6%). Rhttproxy as used in vC...","CVE-2021-22017, CVE-2021-22017 vulnerability, CVE-2021-22017 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, vmware security, vcenter_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-22017",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-22017","Cybersecurity","CVE-2021-22017, CVE-2021-22017 vulnerability, CVE-2021-22017 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":44,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E456F84C-A86E-4EA9-9A3E-BEEA662136E6",[],[112,119],{"id":113,"eventType":114,"eventTime":115,"details":116,"label":117,"color":118},"5579165d-7563-487b-84a5-589216968fad","HIGH_EPSS_DELTA","2025-11-19T04:06:07.415088+00:00","Daily EPSS score increased by 0.104 on 2023-12-30","EPSS Score Increased","red",{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"88228006-5af7-4b34-acea-7ff79bf8ad0b","LOW_EPSS_DELTA","2025-11-22T04:05:54.605229+00:00","Daily EPSS score decreased by 0.104 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":127,"version":37},1793216147544,{"score":129,"band":130,"action":131,"scoredAt":132},81,"High","Emergency patch","2026-07-01T10:27:01.762916+00:00"]