{"metadata": {"vulnerability": "CVE-2021-22991", "count": 56, "kinds": {"milestone": 4, "sighting": 12, "kev": 11, "other": 29}}, "data": [{"timestamp": "2021-01-06T00:00:00Z", "date_only": false, "value": "2021-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-22991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-10T00:00:00Z", "date_only": false, "value": "2021-03-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-03-11T00:00:00Z", "date_only": false, "value": "2021-03-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-189", "record": "CERTFR-2021-AVI-189", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-11T00:00:00Z", "date_only": true, "value": "2021-03-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-16847", "record": "CNVD-2021-16847", "field": "submitTime"}, {"timestamp": "2021-03-11T10:08:20Z", "date_only": false, "value": "2021-03-11T10:08:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_10/21", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "ffb7647c-7c4b-473f-8f6c-1527aa2e25d8", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_10/21"}, {"timestamp": "2021-03-12T00:00:00Z", "date_only": true, "value": "2021-03-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-16847", "record": "CNVD-2021-16847", "field": "openTime"}, {"timestamp": "2021-03-12T04:00:00Z", "date_only": false, "value": "2021-03-12T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=561", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "6bfd1f57-7a9d-46ed-8c0c-b697d5bf55df", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=561"}, {"timestamp": "2021-03-31T00:00:00Z", "date_only": false, "value": "2021-03-31T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-03-31T17:23:14Z", "date_only": false, "value": "2021-03-31T17:23:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-22991", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-31T17:23:14Z", "date_only": false, "value": "2021-03-31T17:23:14.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2021-22991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-31T18:15:00Z", "date_only": false, "value": "2021-03-31T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6W8R-PJM3-Q7X7", "record": "GHSA-6W8R-PJM3-Q7X7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-31T18:15:00Z", "date_only": false, "value": "2021-03-31T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-22991", "record": "GSD-2021-22991", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-31T18:15:14.787Z", "date_only": false, "value": "2021-03-31T18:15:14.787000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-03-31T18:15:14.787Z", "date_only": false, "value": "2021-03-31T18:15:14.787", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22991", "record": "FKIE_CVE-2021-22991", "field": "published"}, {"timestamp": "2021-04-05T00:00:00Z", "date_only": false, "value": "2021-04-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-12-08T00:00:00Z", "date_only": false, "value": "2021-12-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-12-08T04:37:00Z", "date_only": false, "value": "2021-12-08T04:37:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "timestamps.asserted_at", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-22991", "field": "timestamps.asserted_at", "uuid": "a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-22991", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-22991", "record": "GSD-2021-22991", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-22991", "field": "evidence.0.details.added_date", "uuid": "a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "evidence.0.details.date_added", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "timestamps.first_seen_at", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-22991", "field": "timestamps.first_seen_at", "uuid": "a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "status.status_updated_at", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-22991", "field": "status.status_updated_at", "uuid": "a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-22991", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "evidence.0.details.due_date", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-22991", "record": "GSD-2021-22991", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:45:57Z", "date_only": false, "value": "2022-05-24T17:45:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6W8R-PJM3-Q7X7", "record": "GHSA-6W8R-PJM3-Q7X7", "field": "published"}, {"timestamp": "2022-07-12T17:42:00Z", "date_only": false, "value": "2022-07-12T17:42Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-22991", "record": "GSD-2021-22991", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-07-14T00:00:00Z", "date_only": false, "value": "2022-07-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "c558d676-0702-4ee2-88cc-26b5b88d840e"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-08-08T14:21:49.707Z", "date_only": false, "value": "2023-08-08T14:21:49.707000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "sources_update_date.data.4.date"}, {"timestamp": "2023-12-03T11:46:55Z", "date_only": false, "value": "2023-12-03T11:46:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/924", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "d8e1cbdf-199c-414a-8e75-5ab3dfe5490b", "content": "#ExploitObserverAlert\n\nCVE-2021-22991\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2021-22991. On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel (TMM) URI normalization, which may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may theoretically allow bypass of URL based access control or remote code execution (RCE). Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.\n\nFIRST-EPSS: 0.791400000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/924"}, {"timestamp": "2023-12-13T01:23:24.497Z", "date_only": false, "value": "2023-12-13T01:23:24.497599Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-22991", "record": "GSD-2021-22991", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-17T20:27:34.735Z", "date_only": false, "value": "2024-01-17T20:27:34.735000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202103-0965", "record": "VAR-202103-0965", "field": "last_update_date"}, {"timestamp": "2024-05-07T14:26:21Z", "date_only": false, "value": "2024-05-07T14:26:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2881", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "d5259e4a-2fd5-4d41-b4b7-00bebaee1a97", "content": "Critical 1-day Vulnerabilities in F5 BIG-IP, BIG-IQ\n\n1. CVE-2021-22986:\nTraffic Management Microkernels (TMM) uri_normalize_host infoleak/out-of-bounds write\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2126\n2. CVE-2021-22992:\nASM stack-based buffer overflow in is_hdr_criteria_matches\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2132\n3. CVE-2021-22991:\nTMM uri_normalize_host infoleak/out-of-bounds write\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2126", "url": "https://t.me/CyberSecurityTechnologies/2881"}, {"timestamp": "2024-08-03T18:58:26.089Z", "date_only": false, "value": "2024-08-03T18:58:26.089Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-22991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:07:58Z", "date_only": false, "value": "2024-11-14T06:07:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/44f8fbab-88c1-41d9-bb3c-09e163703df0", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "ee3c10c7-b8ed-4736-b338-87483722e9d4"}, {"timestamp": "2024-12-24T20:25:59.940Z", "date_only": false, "value": "2024-12-24T20:25:59.940386Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971215", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "c8d0df7a-2b4a-4f14-aceb-3e29df13d598", "url": "https://feedsin.space/feed/CISAKevBot/items/2971215"}, {"timestamp": "2025-01-29T20:33:09.572Z", "date_only": false, "value": "2025-01-29T20:33:09.572716Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-22991", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T20:33:09.572Z", "date_only": false, "value": "2025-01-29T20:33:09.572716Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22991", "record": "FKIE_CVE-2021-22991", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:48Z", "date_only": false, "value": "2025-01-30T02:17:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RvBtzQw5BxG2kEFTTGiJ_a7-uhs_IE1jJvStrl8ydy-XEGg3", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "dd72d729-4c4a-4036-a524-8fd879fab5db"}, {"timestamp": "2025-02-23T02:10:29Z", "date_only": false, "value": "2025-02-23T02:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "56bf209f-3907-433f-bc22-a1f682be1e3d"}, {"timestamp": "2025-10-21T23:25:50.646Z", "date_only": false, "value": "2025-10-21T23:25:50.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-22991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:50.646Z", "date_only": false, "value": "2025-10-21T23:25:50.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-22991", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:05Z", "date_only": false, "value": "2025-10-22T00:32:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6W8R-PJM3-Q7X7", "record": "GHSA-6W8R-PJM3-Q7X7", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-22991", "field": "timestamps.recorded_at", "uuid": "42179449-d348-4b94-8237-1de61696fec6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:27.914Z", "date_only": false, "value": "2026-02-02T12:28:27.914259Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42179449-d348-4b94-8237-1de61696fec6", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "7fbe83e0-e07f-436a-8254-cc3e3b60cbd7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42179449-d348-4b94-8237-1de61696fec6"}, {"timestamp": "2026-06-17T03:38:10.083Z", "date_only": false, "value": "2026-06-17T03:38:10.083", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22991", "record": "FKIE_CVE-2021-22991", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:41.572Z", "date_only": false, "value": "2026-06-19T12:47:41.572235Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/70c6425e-6f20-4062-b6f9-37e2b8a5ae58", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "83a233b8-7ade-4b8c-8894-94bc1ba01860", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/70c6425e-6f20-4062-b6f9-37e2b8a5ae58"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-22991", "field": "timestamps.recorded_at", "uuid": "a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:53.689Z", "date_only": false, "value": "2026-06-23T14:04:53.689954Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a9d6a0f3-520d-43c5-80cc-ea2d076d413c", "record": "CVE-2021-22991", "field": "creation_timestamp", "uuid": "209b7b01-efcc-4483-9028-2cfd07d4d5f8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a9d6a0f3-520d-43c5-80cc-ea2d076d413c"}]}