CVE-2021-23337

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Lodash/Lodash

  cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*

  Range: <4.17.21
• NetApp/Active Iq Unified Manager3 versions

  cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*+ 2 more

  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
• NetApp/Cloud Manager

  cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*
• NetApp/System Manager

  cpe:2.3:a:netapp:system_manager:9.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Corporate Lending Process Management3 versions

  cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Credit Facilities Process Management3 versions

  cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Extensibility Workbench3 versions

  cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Supply Chain Finance3 versions

  cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Banking Trade Finance Process Management3 versions

  cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Binding Support Function

  cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.9.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Cloud Native Core Policy

  cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Design Studio

  cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Services Gatekeeper

  cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
• Oracle Corporation/Communications Session Border Controller2 versions

  cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*
• Oracle Corporation/Enterprise Communications Broker2 versions

  cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*
• Oracle Corporation/Financial Services Crime And Compliance Management Studio2 versions

  cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*
• Oracle Corporation/Health Sciences Data Management Workbench2 versions

  cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*
• Oracle Corporation/Jd Edwards Enterpriseone

  cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*

  Range: <9.2.6.1
• Oracle Corporation/Peoplesoft Enterprise Peopletools2 versions

  cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
• Oracle Corporation/Primavera Gateway

  cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*

  Range: >=17.12.0,<=17.12.11
• Oracle Corporation/Primavera Unifier4 versions

  cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*range: >=17.7,<=17.12
  • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
• Oracle Corporation/Retail Customer Management And Segmentation Foundation

  cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
• Siemens Foundation/Sinec Ins3 versions

  cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*range: <1.0
  • cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
• Lodash/Lodashdescription
• osv-coords9 versions

  pkg:apk/chainguard/py3.10-captumpkg:apk/chainguard/py3.11-captumpkg:apk/chainguard/py3.12-captumpkg:apk/chainguard/py3.13-captumpkg:gem/lodash-railspkg:npm/lodashpkg:npm/lodash-espkg:npm/lodash-templatepkg:npm/lodash.template

  < 0.9.0-r1+ 8 more

  • (no CPE)range: < 0.9.0-r1
  • (no CPE)range: < 0.9.0-r1
  • (no CPE)range: < 0.9.0-r1
  • (no CPE)range: < 0.9.0-r1
  • (no CPE)range: < 4.17.21
  • (no CPE)range: < 4.17.21
  • (no CPE)range: < 4.17.21
  • (no CPE)range: <= 1.0.0
  • (no CPE)range: <= 4.5.0

• cert-portal.siemens.com/productcert/pdf/ssa-637483.pdfnvdPatchThird Party AdvisoryWEB
• www.oracle.com//security-alerts/cpujul2021.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujan2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpujul2022.htmlnvdPatchThird Party AdvisoryWEB
• www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929nvdExploitThird Party AdvisoryWEB
• snyk.io/vuln/SNYK-JS-LODASH-1040724nvdExploitThird Party AdvisoryWEB
• github.com/advisories/GHSA-35jh-r3h4-6jhmghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2021-23337ghsaADVISORY
• security.netapp.com/advisory/ntap-20210312-0006/nvdThird Party Advisory
• github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.jsghsaWEB
• github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851nvdBroken Link
• github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1cghsaWEB
• github.com/rubysec/ruby-advisory-db/blob/master/gems/lodash-rails/CVE-2021-23337.ymlghsaWEB
• security.netapp.com/advisory/ntap-20210312-0006ghsaWEB

No linked articles in our index yet.