lucee

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

lucee records in CISA KEV

No lucee vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Lucee Server · all components

TI-2021-04407 CVE-2021-21307

CRITICAL 85

Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.89189 Published 2021-02-11 Fixed in 5.3.5.96, 5.3.6.68 +1 CWE-862