Sign In

CVE-2021-23337

📊 7.2 HIGH⚡ 0.3%🎯 0 exploits
📅 Published Feb 15, 2021
📋 Status: Modified

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

🎯 Affected Products & Systems

48 product configurations affected

Filter by type:
📱
lodash / lodash
Application
Vulnerable
Version: < 4.17.21
Target SW: node.js
CPE:
cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.2.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.3.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 14.5.0
CPE:
cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 1.9.0
CPE:
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.9.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 1.11.0
CPE:
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 7.4.2.0.0
CPE:
cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 7.0
CPE:
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.4
CPE:
cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*
📱
Vulnerable
Version: 9.0
CPE:
cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.2.0
CPE:
cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.3.0
CPE:
cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.0.8.2.0
CPE:
cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.0.8.3.0
CPE:
cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 2.5.2.1
CPE:
cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*
📱
Vulnerable
Version: 3.0.0.0
CPE:
cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: < 9.2.6.1
CPE:
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.58
CPE:
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
📱
Vulnerable
Version: 8.59
CPE:
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 17.12.0 ∧ ≤ 17.12.11
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 18.8.0 ∧ ≤ 18.8.12
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 19.12.0 ∧ ≤ 19.12.11
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 20.12.0 ∧ ≤ 20.12.7
CPE:
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: ≥ 17.7 ∧ ≤ 17.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
📱
Vulnerable
Version: 18.8
CPE:
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
📱
Vulnerable
Version: 19.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
📱
Vulnerable
Version: 20.12
CPE:
cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
📱
Vulnerable
Version: 19.0
CPE:
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: All versions
Target SW: linux
CPE:
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
📱
Vulnerable
Version: All versions
Target SW: vmware_vsphere
CPE:
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
📱
Vulnerable
Version: All versions
Target SW: windows
CPE:
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
📱
netapp / cloud manager
Application
Vulnerable
Version: All versions
CPE:
cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*
📱
netapp / system manager
Application
Vulnerable
Version: 9.0
CPE:
cpe:2.3:a:netapp:system_manager:9.0:*:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: < 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
📱
siemens / sinec ins
Application
Vulnerable
Version: 1.0
CPE:
cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
48 products•scroll for more
Metrics
7.2 HIGHCVSS v3.1[email protected]
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector:
NETWORK
Complexity:
LOW
Privileges:
HIGH
User Interaction:
NONE
Confidentiality:
HIGH
Integrity:
HIGH
Availability:
HIGH
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Modified
CVSS Details
7.2 (HIGH)v3.1
Source: [email protected]
EPSS Details
0.3% (Minimal)51.1th percentile
Last updated: Nov 1, 2025
Exploitation probability within 30 days
Published Date
Feb 15, 2021 (4 years ago)
Last Modified
Nov 21, 2024 (11 months ago)
Security Weaknesses1
References8