System	Score	Found at
cvssv3	9.0	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21687.json
epss	0.00319	https://api.first.org/data/v1/epss?cve=CVE-2021-21687
epss	0.00319	https://api.first.org/data/v1/epss?cve=CVE-2021-21687
epss	0.00319	https://api.first.org/data/v1/epss?cve=CVE-2021-21687
cvssv3.1_qr	CRITICAL	https://github.com/advisories/GHSA-3q84-vrvx-rfvf
cvssv3.1	9.0	https://github.com/jenkinsci/jenkins
generic_textual	CRITICAL	https://github.com/jenkinsci/jenkins
cvssv3.1	9.0	https://nvd.nist.gov/vuln/detail/CVE-2021-21687
generic_textual	CRITICAL	https://nvd.nist.gov/vuln/detail/CVE-2021-21687
archlinux	Critical	https://security.archlinux.org/AVG-2526
cvssv3.1	9.0	https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
generic_textual	CRITICAL	https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21687.json
		https://api.first.org/data/v1/epss?cve=CVE-2021-21687
		https://github.com/jenkinsci/jenkins
		https://nvd.nist.gov/vuln/detail/CVE-2021-21687
		https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
2020324		https://bugzilla.redhat.com/show_bug.cgi?id=2020324
ASA-202111-1		https://security.archlinux.org/ASA-202111-1
AVG-2526		https://security.archlinux.org/AVG-2526
GHSA-3q84-vrvx-rfvf		https://github.com/advisories/GHSA-3q84-vrvx-rfvf
RHSA-2021:4799		https://access.redhat.com/errata/RHSA-2021:4799
RHSA-2021:4801		https://access.redhat.com/errata/RHSA-2021:4801
RHSA-2021:4827		https://access.redhat.com/errata/RHSA-2021:4827
RHSA-2021:4829		https://access.redhat.com/errata/RHSA-2021:4829
RHSA-2021:4833		https://access.redhat.com/errata/RHSA-2021:4833

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21687.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/jenkinsci/jenkins

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2021-21687

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Found at https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.54326
EPSS Score	0.00319
Published At	June 30, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-01T11:52:45.437270+00:00	Arch Linux Importer	Import	https://security.archlinux.org/AVG-2526	36.1.3