8.8
Élevée
CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-77
Description
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pulse Connect Secure | Versions non publiées |
Autres CVE de Pulse Connect Secure
Les 21 CVE de Pulse Connect Secure →
CVE-2021-22965
A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a…
Non notée
CVE-2021-22937
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write…
Non notée
CVE-2021-22936
A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack…
Non notée
CVE-2021-22935
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command…
Non notée