CyberzSOC

Applicability
← Back to CVE-2021-23758

CVE-2021-23758

In CISA KEV Ajax.NET Professional

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

OSV.dev (incl. GHSA)
precedence 80 · revised 2026-08-28
3 affected 3 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2026-08-27
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (7)

Product Status Versions Remediation Source
AjaxNetProfessional affected < 21.11.29.1 vendor fix → 21.11.29.1 osv GHSA-6r7c-6w96-8pvw
https://github.com/michaelschwarz/ajax.net-professional affected < 5955f9eace7bfe3ecba7f27778c4d0b56eb06287 vendor fix → 5955f9eace7bfe3ecba7f27778c4d0b56eb06287 osv
https://github.com/michaelschwarz/ajax.net-professional affected < b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 vendor fix → b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 osv
AjaxNetProfessional fixed 21.11.29.1 vendor fix → 21.11.29.1 osv GHSA-6r7c-6w96-8pvw
https://github.com/michaelschwarz/ajax.net-professional fixed 5955f9eace7bfe3ecba7f27778c4d0b56eb06287 vendor fix → 5955f9eace7bfe3ecba7f27778c4d0b56eb06287 osv
https://github.com/michaelschwarz/ajax.net-professional fixed b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 vendor fix → b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 osv
n/a/AjaxPro.2 n/a · AjaxPro.2 affected no version stated vendor label: all versions none available cve_cna

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.