[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNrkpkgtMxJsqh33D4ENuCXxx8BwIVUzipRCr6HXo5ew":3,"g5a-risk:CVE-2021-20289":143},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":60,"references":61,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":26,"otxData":26,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":139,"notableEvents":140},"CVE-2021-20289","What is CVE-2021-20289?","A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.","A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception respons...","2021-03-26T17:15:13.217","2022-05-10T15:45:32.033",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.014,[38,38,38,38,38,38,38],"Medium",[42,47,52,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","resteasy","*","cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"netapp","oncommand_insight","-","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",{"vendor":53,"product":53,"version":45,"criteria":54,"vulnerable":4},"quarkus","cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"oracle","communications_cloud_native_core_console","1.9.0","cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*",4,[62,68],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1935927","Red Hat",[66,67],"Issue Tracking","Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html","Oracle",[72,67],"Patch",2,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-209","Generation of Error Message Containing Sensitive Information","The product generates an error message that includes sensitive information about its environment, users, or associated data.","The sensitive information may be valuable information on its own (such as a password), or it may be useful for launching other, more serious attacks. The error message may be created in different ways:\nAn attacker may use the contents of error messages to help launch another, more focused attack. For example, an attempt to exploit a path traversal weakness (CWE-22) might yield the full pathname of the installed application. In turn, this could be used to select the proper number of \"..\" sequences to navigate to the targeted file. An attack using SQL injection (CWE-89) might not initially succeed, but an error message could reveal the malformed query, which would expose query logic and possibly even passwords or other sensitive information used within the query.","Draft","Base","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2021-20289? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-20289, a medium severity cyber security vulnerability from 2021. A flaw was found in RESTEasy in all versions of RESTEasy ...","CVE-2021-20289, CVE-2021-20289 vulnerability, CVE-2021-20289 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, redhat security, netapp security, quarkus security, oracle security, resteasy vulnerability, oncommand_insight vulnerability, quarkus vulnerability, communications_cloud_native_core_console vulnerability","\u002Fwhat-is\u002Fcve-2021-20289",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-20289","Cybersecurity","CVE-2021-20289, CVE-2021-20289 vulnerability, CVE-2021-20289 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,120,126,133],{"Operator":26,"Negate":26,"Nodes":113},[114],{"Operator":115,"Negate":26,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":119},"EDB9A229-3B62-487E-B31D-580445DAFE8D","4.6.0",{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":115,"Negate":26,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F1BE6C1F-2565-4E97-92AA-16563E5660A5",{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":115,"Negate":26,"CPEMatch":129},[130],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":132,"VersionEndIncluding":26},"5D115261-69F8-4854-B5DE-656858132B62","1.13.4",{"Operator":26,"Negate":26,"Nodes":134},[135],{"Operator":115,"Negate":26,"CPEMatch":136},[137],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DAAB7154-4DE8-4806-86D0-C1D33B84417B",[],[],{"lastModified":11,"cacheTime":142,"version":32},1793236868937,{"score":144,"band":145,"action":146,"scoredAt":147},21,"Low","Monitor","2026-10-28T06:50:37.137174+00:00"]