CVE-2021-23337 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
snyk	CNA	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 73%

Vendor	Product	Version
lodash	lodash	𝑥 < 4.17.21
oracle	banking_corporate_lending_process_management	14.2.0
oracle	banking_corporate_lending_process_management	14.3.0
oracle	banking_corporate_lending_process_management	14.5.0
oracle	banking_credit_facilities_process_management	14.2.0
oracle	banking_credit_facilities_process_management	14.3.0
oracle	banking_credit_facilities_process_management	14.5.0
oracle	banking_extensibility_workbench	14.2.0
oracle	banking_extensibility_workbench	14.3.0
oracle	banking_extensibility_workbench	14.5.0
oracle	banking_supply_chain_finance	14.2.0
oracle	banking_supply_chain_finance	14.3.0
oracle	banking_supply_chain_finance	14.5.0
oracle	banking_trade_finance_process_management	14.2.0
oracle	banking_trade_finance_process_management	14.3.0
oracle	banking_trade_finance_process_management	14.5.0
oracle	communications_cloud_native_core_binding_support_function	1.9.0
oracle	communications_cloud_native_core_policy	1.11.0
oracle	communications_design_studio	7.4.2.0.0
oracle	communications_services_gatekeeper	7.0
oracle	communications_session_border_controller	8.4
oracle	communications_session_border_controller	9.0
oracle	enterprise_communications_broker	3.2.0
oracle	enterprise_communications_broker	3.3.0
oracle	financial_services_crime_and_compliance_management_studio	8.0.8.2.0
oracle	financial_services_crime_and_compliance_management_studio	8.0.8.3.0
oracle	health_sciences_data_management_workbench	2.5.2.1
oracle	health_sciences_data_management_workbench	3.0.0.0
oracle	jd_edwards_enterpriseone_tools	𝑥 < 9.2.6.1
oracle	peoplesoft_enterprise_peopletools	8.58
oracle	peoplesoft_enterprise_peopletools	8.59
oracle	primavera_gateway	17.12.0 ≤ 𝑥 ≤ 17.12.11
oracle	primavera_gateway	18.8.0 ≤ 𝑥 ≤ 18.8.12
oracle	primavera_gateway	19.12.0 ≤ 𝑥 ≤ 19.12.11
oracle	primavera_gateway	20.12.0 ≤ 𝑥 ≤ 20.12.7
oracle	primavera_unifier	17.7 ≤ 𝑥 ≤ 17.12
oracle	primavera_unifier	18.8
oracle	primavera_unifier	19.12
oracle	primavera_unifier	20.12
oracle	retail_customer_management_and_segmentation_foundation	19.0
netapp	active_iq_unified_manager	-
netapp	active_iq_unified_manager	-
netapp	active_iq_unified_manager	-
netapp	cloud_manager	-
netapp	system_manager	9.0
siemens	sinec_ins	𝑥 < 1.0
siemens	sinec_ins	1.0
siemens	sinec_ins	1.0:sp1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

node-lodash

bullseye	4.17.21+dfsg+~cs8.31.173-1 fixed
buster	no-dsa
bookworm	4.17.21+dfsg+~cs8.31.198.20210220-9 fixed
sid	4.17.21+dfsg+~cs8.31.198.20210220-9 fixed
trixie	4.17.21+dfsg+~cs8.31.198.20210220-9 fixed

Ubuntu Releases

Ubuntu Product

Codename

node-lodash

noble	needed
mantic	ignored
lunar	ignored
kinetic	ignored
jammy	needed
impish	ignored
hirsute	ignored
groovy	ignored
focal	needed
bionic	needed
xenial	needs-triage
trusty	dne