返回 CVE 浏览器

CVE-2021-22893

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score34.7440%

EPSS Percentile98.01th

Published2021-04-23

Last Modified2025-12-18

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Affected Platforms (CPE)

📦

Ivanti

Connect Secure

= 9.0= 9.1

References & Advisories

🔗 https://blog.pulsesecure.net/pulse-connect-secure-security-update/

🔗 https://kb.cert.org/vuls/id/213092

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/

🔗 https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html

🔗 https://blog.pulsesecure.net/pulse-connect-secure-security-update/

🔗 https://kb.cert.org/vuls/id/213092

🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/

🔗 https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html

相关漏洞威胁

CVE-2026-167284.8

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the applic...

CVE-2026-132687.8

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta...

CVE-2026-672017.7

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers...

CVE-2026-598986.3

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attack...

CVE-2021-22893 Detail & Impact Analysis | CVSS 10.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space